how tunnel works

tunnel is one coin on Solana. It is a normal pump.fun coin with one difference: its creator fees do not go to whoever launched it. They are swapped to Monero over NEAR intents and spent on real RandomX hashpower, and the XMR that hashpower mines is paid to the people holding the coin.

Every holder wallet is a worker at the pool. Each one has a worker id, a share, a live hashrate, and a running count of valid shares. The shaft on the front page is a drawing of those workers, each one a lamp at the depth of its own work.

The XMR the coin mines is also the inventory of tunnel's own NEAR intents solver, which earns spread on other people's swaps and pays that spread back into the hashpower budget. The mining compounds.

Trades on pump.fun pay a creator fee. The engine claims it in SOL. The SOL is posted as a NEAR intent and comes back as native XMR in the tunnel wallet. When the budget clears the minimum rental and the profitability ratio clears one, the engine rents a RandomX rig pointed at a public pool under the current worker set. The pool pays XMR to the tunnel wallet. When the Monero ten block unlock completes, half of the harvest is paid to holders by share and half buys the coin back on the curve and burns it. Then it waits for the next fee claim.

Every money step is written down before it runs with an idempotency key. A cycle that stops halfway resumes where it stopped and never pays twice. Every step is a row with a hash, and every row links to the chain it happened on.

At the rental's snapshot slot the engine records every holder's balance, drops dust below one thousand base units, and assigns each holder a share in basis points. The rig is handed the full worker list. The pool reports each worker on its own, so hashrate, valid shares, and pending XMR are per holder, from the pool's own API, not from the site.

The merkle root of the sorted holder list is in the rental receipt on Solana. Anyone can rebuild it from the chain and prove their worker was in the set.

The engine never uses a DEX for the fee leg. Claimed SOL becomes an intent on NEAR with XMR out and the tunnel Monero wallet as recipient. Solvers compete. The realised spread in basis points is recorded and decides the rig tier: a tight fill rents more, a wide fill rents the minimum.

tunnel's solver watches the NEAR intent pool for SOL to XMR intents and fills them from mined XMR when, and only when, inventory minus the fill stays above the reserve floor. The reserve floor is every worker's pending XMR plus any harvest still unlocking. The SOL it receives is posted back as an intent for XMR, and the difference is captured spread, credited to the dig budget.

The solver's NEAR account, its fills, and its live book are on the solver page. Every fill is a NEAR transaction.

A breakthrough fires when a harvest unlocks. It is never scheduled. Half the harvest goes to holders on their rail. Half goes out as a multi leg intent whose last leg is a single buy on the pump.fun curve, signed by the solver, with the bought tokens burned in the same transaction. Because the fill settles on NEAR before anything is visible on Solana, the buy cannot be sandwiched.

Default: the holders' half is swapped to SOL over an intent and dropped to workers by share, receipted, with nothing to claim. Stealth: a holder signs one message with a Monero subaddress and from then on is paid native XMR off the mined stack. The site stores only a hash of the subaddress publicly.

An Anchor program named tunnel, with its name rendered on explorers through program metadata, holds one PDA per rental: the mint, the rental index, the snapshot slot, the worker set root, the hashrate rented, the provider id hash, the fee claim signature, the intent id hash, and later the harvest transaction hash, the harvest amount, and the payout intent id hash. The receipts page lays out the bytes and shows every PDA.

Live: the value, polled from Birdeye every second. The hashrate and shares, from the pool's API every fifteen seconds. The Monero network, every minute. Everything in the tables, pushed from the engine's writes the moment they land. Not live: nothing. There is no simulated number on this site. A blank slot means the thing it measures has not happened.

Rented hashpower is paid for in advance and may underperform its listing. Pool luck is real and a rental can harvest less than it cost. The profitability ratio is a measurement of the recent past, not a promise. NEAR intents depend on solvers choosing to fill, and a leg can wait. Monero's ten block unlock is a hard delay on every harvest. The engine's keys are held by the operator; the receipts exist so that what it did can be checked, not so that it cannot act.

Do I have to register to get paid. No. The default rail drops SOL to every worker by share.

Where does my worker id come from. tunnel followed by the first ten characters of your public key.

Why is my lamp dark. The pool has reported no hashes for your worker in the current window. It will light when hashes arrive.

Why is a value blank. Because the thing it measures has not happened yet or the coin is not configured.

Can the site be used to trade. No. Trade on pump.fun. This is a readout.