Case file № 808B6A · opened Oct 6, 2026 · Solana

$GRASS

“Grass”

Grass7B4RdKfBCjTKgSqnXkqjwiGvQyFbuSCUJr3XXjs

Governance
Yield staking

Price: $0.723
Market cap: $505.41M
Liquidity: $319.4K
Vol 24h: $1.17M
Age: 2.2y

The short version

GRASS is presented as Grass’s governance token, associated with a bandwidth-sharing network and router staking rewards, though the reviewed website does not reference the supplied mint addressA K H. Independent testing confirmed the guest dashboard, and an AppEsteem directory supported application certification, but live bandwidth routing, points allocation and reward conversion remained inconclusiveL. Mint authority remains active, metadata is mutable, and the top ten accounts hold approximately 51.2%, including 25.2% in an account owned by the mint/update authorityC A D. The described service has a plausible revenue source, but reward conversion values and sufficient recurring revenue were not establishedK.

Red flags

5red flags

Rule
Someone can still mint new tokens.
Someone can still mint new tokens.
cap/mint-authorityC
Rule
Name, symbol, image and links can be changed.
Update authority 31rYartQwHeBMjAe2MgGpffGV57fQY3kug4BDN8tLGqQ
cap/metadata-mutableA
Rule
A few accounts hold most of the supply.
Top 10 accounts hold 51.2%
holders/concentratedD
Rule
One account holds a large share.
Largest account holds 25.2%
holders/whaleD
Rule
The website does not show this token's address.
The address does not appear on https://getgrass.io/
site/mint-unreferencedH I

Part two

The claims

7 claims lifted from their own site. 1 confirmed, 5 untested, 1 unverifiable.

C101/07product

They say

These institutions may use your internet for things like checking how certain websites appear in different regions.
grass.io
Untested

We checked

Testing was inconclusive because no client could be run and no live traffic destinations could be observed.

Rests on

To settle it Run a Grass client and examine its connection activity and network-use documentation; validate any traffic and destination claims independently.

Skeptic: plausible Grass describes a technically coherent bandwidth-sharing and public-web-data service, with use cases such as checking how websites appear in different regions. The pages explain the intended model, but do not independently establish customer demand or the claimed institutions’ identities.

We used it: inconclusive Documentation supports the project's stated model, not independent confirmation of actual live traffic. No SOL/token transaction was relevant to this bandwidth-sharing claim, and no wallet request was presented. The needed executable client and traffic observation were unavailable.

C202/07tokenomics

They say

Grass rewards users with Grass Points, which you can turn into Grass Tokens, or USDC.
grass.io
Untested

We checked

Guest access exposed no conversion flow or resulting transfer; the attempted test was inconclusive rather than evidence against conversion.

Rests on

To settle it Check the account rewards and wallet flows and verify any resulting token transfers on Solana; the reviewed pages do not specify conversion terms.

Skeptic: plausible The project says points can lead to GRASS or USDC rewards, and its docs describe token allocations for community incentives. The reviewed material does not give a fixed conversion rate or establish that points have a guaranteed cash value.

We used it: inconclusive The FAQ states that points factor into Grass Tokens or USDC a user may receive in future distributions, but I did not identify a user-initiated points-to-token/USDC conversion. I attempted on-chain verification only insofar as no resulting transaction/address was supplied by a conversion flow; chain lookup tools could not be run due to exhausted tool budget. This is inconclusive, not evidence against conversion.

C303/07tokenomics

They say

A fixed pool of 1,000,000 Network Points is created and awarded to users each day.
grass.io
Untested

We checked

No signed-in accrual or epoch history was available to verify actual daily point allocation. Documentation alone does not confirm implementation.

Rests on

To settle it Compare dashboard point accruals and published epoch data over time; verify whether daily allocations match the stated amount.

Skeptic: plausible The points-model page specifies a daily pool of 1,000,000 Network Points, allocated pro rata according to bandwidth actually used. This is a points-accounting rule, not a promise of a fixed monetary payout.

We used it: inconclusive The publication supports that Grass states the model and pool size; the requested verification against actual daily distributions was blocked by the guest-only dashboard and lack of epoch history. No chain lookup could test daily point allocations because they are not shown as on-chain token transfers here.

C404/07tokenomics

They say

The purchase or installation of a Grasshopper, a Grass application (Android or desktop), or Grass extension is not a guarantee that you will earn Network Points or any associated rewards.
grass.io
Untested

We checked

The client could not be run to compare actual connection and usage states against reward allocation; the attempted test was inconclusive.

Rests on

To settle it Use the client and compare usage/connection conditions with dashboard accruals; allocation is programmatic and may vary with demand.

Skeptic: plausible The project explicitly says Network Points depend on actual bandwidth use and factors such as region, connection stability, and network demand; installing the client alone does not guarantee them.

We used it: inconclusive Published material backs the stated policy, but I could not test programmatic live allocation. No transaction was requested, and on-chain transfer verification would not establish the client-side bandwidth/point allocation claim.

C505/07securitynot testable as stated

They say

In addition, we can’t and won’t use your browsing history.
grass.io
Unverifiable

We checked

The evidence does not establish comprehensive client data collection or internal personal-information sale practices. Website traffic capture does not verify application-wide privacy behavior.

Rests on

Skeptic: doubtful The privacy page says Grass does not use browsing history or sell personal information, and describes the information it says it collects. These are plausible design and policy claims, but the reviewed material does not independently verify actual data flows or all product behavior.

C606/07security

They say

We’ve even successfully integrated with AppEsteem and achieved the highly regarded AppEsteem certification
grass.io
Untested

We checked

Independent AppEsteem listings support active certification for Grass.app and MacOS. However, the combined claim remains inconclusive because ongoing monitoring and AMTSO contribution were not independently established.

Rests on

To settle it Check the linked AppEsteem vendor certification listing and the AMTSO membership/contributor records.

Skeptic: plausible Grass’s stated AppEsteem certification is corroborated by AppEsteem’s directory, which lists active Grass applications under Grass OpCo Ltd. This supports the certification claim, not a broader guarantee of safety.

We used it: inconclusive AppEsteem certification is supported by the linked listing; the AMTSO membership/contributor component was not independently verified. The combined claim remains inconclusive. On-chain checks are not applicable to certification/membership.

C707/07product

They say

Track your earned rewards on your dashboard.
grass.io
Confirmed

We checked

Independent guest-mode inspection found balance, earnings, uptime and connected-network sections, network controls and signup/sign-in. This confirms visible interface presence, not authenticated accrual or successful network connections.

Rests on

Skeptic: plausible The homepage promotes a rewards dashboard, and the linked dashboard is presented as the place to track earnings, uptime, and referrals. The reviewed materials do not establish that displayed balances are cash-equivalent or guaranteed payouts.

We used it: confirmed The dashboard and controls are present in guest mode, but showed zero points/balance and no network. The site did not generate a wallet connection/signing request for these dashboard controls, so no transaction was expected. Installing/running the Grass client was not possible from the browser environment; features beyond what the guest dashboard exposes remain untested.

Part three

Exhibits

Everything the verdicts rest on, as we found it. Files are hashed and kept.

Exhibit A

Token metadata

checked Oct 6, 2026

Name: Grass
Symbol: GRASS
Source: metaplex
Update authority: 31rYar…8tLGqQ
Mutable: yes, can be changed
Description: GRASS is the official governance token for Grass.
Links: twitter x.comwebsite getgrass.io

Exhibit B

Market

checked Oct 6, 2026

Price: $0.723
Market cap: $505.41M
Liquidity: $319.4K
Vol 24h: $1.17M

Pair	Quote	Liquidity	Age
orca	SOL	$319.4K	23mo

Exhibit C

Mint account

checked Oct 6, 2026

Mint authority: 31rYar…8tLGqQ
Freeze authority: revoked
Permanent delegate: revoked
Close authority: revoked
Program: spl-token
Supply: 999,992,825
Decimals: 9
Transfer fee: none
Transfer hook: none
Extensions: none
Capabilities: cap/mint-authority

Exhibit D

Holders

checked Oct 6, 2026

Top 10 hold: 51%
Largest: 25%

Exhibit E

Deployer

checked Oct 6, 2026

Deployer: 6M8ky5…MxBaMN
Launched: Aug 3, 2024 · 2.2y ago
Programs: SQDS4ep65T869zMMBKyuUq6aD6EgTu8psMjkvj52pCf
GrassSxqKjbEGecs8gWJR2JSwktDg56iUwPKXdFXdbS6
system
spl-token

Exhibit F

Funding neighborhood

checked Oct 6, 2026

Other tokens: 0
Dead or unlisted: 0
Wallets: 5
Over $1M: 0

Exhibit G

X account

checked Oct 6, 2026

Handle: @getgrass_io
Name: touch grass
Created: Jan 8, 2015 · 11.7y ago
Based in: —
Renames: 0
Last rename: —

Exhibit H

Website

checked Oct 6, 2026

Site: getgrass.io
Found via: metadata
Shows this mint: no

Exhibit I

Site capture

checked Oct 6, 2026

Screenshot of grass.io — grass.io · as our browser saw it

Stack: Next.js
WordPress
GitBook
Trackers: none
Third parties: getgrass.io
www.youtube.com
cdn-4.convertexperiments.com
fonts.gstatic.com
googleads.g.doubleclick.net
static.doubleclick.net
i.ytimg.com
www.google.com
jnn-pa.googleapis.com
yt3.ggpht.com
www.gstatic.com
Calls: GET https://cdn-4.convertexperiments.com/api/v1/project-optional-settin…
GET https://googleads.g.doubleclick.net/pagead/id
POST https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Gene…
GET https://www.gstatic.com/youtube/img/icons/mweb/youtube_fill/logo/v2…
POST https://www.youtube.com/youtubei/v1/log_event

Exhibit J

Site review

checked Oct 6, 2026self-reported · can’t settle a claim

Grass describes itself as a bandwidth-sharing network that lets users run an app or extension to share unused internet bandwidth for public web-data requests and earn Grass Points. Its site says points may be converted into Grass Tokens or USDC, but the reviewed materials did not establish token-specific mechanics for the supplied Solana address.

positiveThe site provides a concrete explanation that Network Points depend on actual bandwidth usage and explicitly disclaims guaranteed rewards from installation alone.
concernThe supplied Solana token address was not found in the captured homepage text or in the 11 searched scripts; the reviewed homepage/docs do not substantiate that address or provide token supply, allocation, fee, burn, lock, or staking mechanics.
concernThe homepage's linked GitBook FAQ URL returned a page-not-found response, although the response exposed separate tokenomics, staking, and airdrop documentation links.
neutralThe app dashboard is accessible and presents wallet/reward-related navigation, but its visible content asks users to sign up and reports no connected networks for the guest session.

Exhibit K

Skeptic

checked Oct 6, 2026

Grass is a bandwidth-sharing service: it routes public-web requests through participating users’ internet connections for institutional or business use, and records contributions as points. Its materials say points may lead to GRASS or USDC rewards, while GRASS token documentation describes allocations and router staking; the reviewed material does not establish a guaranteed cash return for users.

Exhibit L

Product test

checked Oct 6, 2026

Field notes

Started at app.grass.io and examined the guest dashboard (balance, earnings/uptime, statistics, connected networks and connect/add network controls), registration form (email and agreement required), and app downloads. Did not enter personal information or create an account. Reviewed the project's FAQ, Network Use Policy, Grass Node documentation, and points-model article. The materials describe public-web-data collection for verified businesses, points categories, the stated one-million daily pool, and allocation factors. These are project documentation, not independent observation. I did not install/run a Grass client, so could not observe live traffic, accruals, epoch totals or rewards conversion. No Phantom connect/sign request or wallet transfer action appeared; no transaction hash/payee was offered for chain inspection. I attempted wallet balance and token account lookup after tool budget was exhausted, and those calls were blocked. Thus no chain evidence was available to inspect, and I did not make a transaction. AppEsteem's linked certification listing showed active entries for Grass OpCo; the AMTSO membership directory snapshot did not allow independent confirmation of Grass.

C1 inconclusiveDocumentation supports the project's stated model, not independent confirmation of actual live traffic. No SOL/token transaction was relevant to this bandwidth-sharing claim, and no wallet request was presented. The needed executable client and traffic observation were unavailable.
C2 inconclusiveThe FAQ states that points factor into Grass Tokens or USDC a user may receive in future distributions, but I did not identify a user-initiated points-to-token/USDC conversion. I attempted on-chain verification only insofar as no resulting transaction/address was supplied by a conversion flow; chain lookup tools could not be run due to exhausted tool budget. This is inconclusive, not evidence aga…
C3 inconclusiveThe publication supports that Grass states the model and pool size; the requested verification against actual daily distributions was blocked by the guest-only dashboard and lack of epoch history. No chain lookup could test daily point allocations because they are not shown as on-chain token transfers here.
C4 inconclusivePublished material backs the stated policy, but I could not test programmatic live allocation. No transaction was requested, and on-chain transfer verification would not establish the client-side bandwidth/point allocation claim.
C6 inconclusiveAppEsteem certification is supported by the linked listing; the AMTSO membership/contributor component was not independently verified. The combined claim remains inconclusive. On-chain checks are not applicable to certification/membership.
C7 confirmedThe dashboard and controls are present in guest mode, but showed zero points/balance and no network. The site did not generate a wallet connection/signing request for these dashboard controls, so no transaction was expected. Installing/running the Grass client was not possible from the browser environment; features beyond what the guest dashboard exposes remain untested.

$GRASS

5red flags

Someone can still mint new tokens.

Name, symbol, image and links can be changed.

A few accounts hold most of the supply.

One account holds a large share.

The website does not show this token's address.