Is otc-desk.fun safe? No: it's a fake $OTC "Holder Crates" page carrying the same wallet-signing code as stonkfoundation.fun
otc-desk.fun was registered in the same second as the fake $STONK crates site, serves byte-identical wallet-signing code, and is promoted by an X account posing as OTC's. The page says there's no wallet connection; its code is built to make your wallet sign.
trenchbook.app · Is otc-desk.fun safe? No: it's a fake $OTC "Holder Crates" page carrying the same wallet-signing code as stonkfoundation.fun · filed Oct 18, 2026 · trenchbook.app/dispatch/otc-desk-fun-crates
Is otc-desk.fun safe? No. Don't connect a wallet to it, and don't sign anything it shows you. As of 4:06 PM ET on 18 October, it is a fake "Holder Crates" page using OTC's name. We're not linking it.
It isn't OTC's. The page is promoted by @UseOtcsOnSol, an X account named "OTC's Foundation" whose bio copies the real OTC account, @otc_labs. The account was opened in June 2012 and had about 41 followers when we first looked. At 3:52 PM ET it posted an article, "$OTC Holder Crates: Build History. Strengthen Your Crate.", whose "Open Your Crate" buttons go to otc-desk.fun/crates. It had about 10,800 views by 4:06 PM ET. We found no crates program on @otc_labs.
It matches the fake $STONK crates site we reported at 3:35 PM ET. otc-desk.fun was registered at 1:21:33 PM ET today through the registrar NICENIC, in the same second and through the same registrar as stonkfoundation.fun. Its main script is byte-identical to that site's: the same file, down to the last character. It reports to the same server, and the article copies the $STONK one word for word in places, such as "Five tiers. Two factors." The same kind of code, reporting to the same server, has run on earlier crates sites, so shared code alone doesn't tell us who is behind each one.
What the page says, and what its code does. The page tells visitors "No wallet connection on this site" and "Nothing is connected or recorded", and points to @otc_labs "for official announcements" to look legitimate. Its script, which we read as text without running it, looks up the visitor's location, hooks the Phantom and Solflare wallets, and calls the wallet functions that ask you to sign transactions. A crates page has no reason to make your wallet sign anything.
If you already signed something on it: move what's left to a new wallet right away and revoke the old wallet's token approvals. If you only opened the page and didn't connect or sign, nothing has moved, but don't go back.
- Who controls @UseOtcsOnSol and @UseLauchsSF, and the server both sites report to.
- Whether more brands were registered in the same batch.
- Whether any wallet has been drained through this site; we found no reports by 4:06 PM ET.
The claims, checked
who said it, and what the evidence shows“No wallet connection on this site.”
The page's own script hooks Phantom and Solflare and calls the wallet functions that sign transactions. Read as text on 18 October; byte-identical to stonkfoundation.fun's script.
Sources
- project OTC's official X account, @otc_labs
- researcher Our check of stonkfoundation.fun, the same code
- researcher Our earlier crates warnings
Read next
Registered 1:21 PM todayBRIEFINGRegistered 1:21 PM todayIs stonkfoundation.fun safe? No: it's a fake $STONK "Holder Crates" page carrying wallet-draining code
1,404 wallets drainedBRIEFING1,404 wallets drainedIs my Qubic wallet safe? Not if its seed was made on an iPhone, iPad or Safari before 18 October
3 chains in 69 secondsBRIEFING3 chains in 69 secondsThe $4M frogman drain: three chains emptied in 69 seconds, and the SOL went into a privacy poolWe check new claim sites, airdrops and launches as they trend. Follow @trenchbookapp for the next one.
Know more, or named here and want to reply? DM @trenchbookapp on X. A wallet's owner who proves control of it gets their reply printed.