Roadmap

DeepGyre launched in September 2026 and is built in public · reviewed 2026-10-30

Three lists, stated plainly: what works today, what is being worked on, and what has not been done. A line moves when it stops being true. The live state of every data feed is on the status page, and how each figure is built is on methodology.

Working today

• Referral program — Commission on the payments of the people you invite, a discount on their first plan and a free Pro period on your first paid referral — pending through the refund window, reversed by a refund. The current numbers are on the pricing page.
• Token security scanner — Honeypot, tax and ownership checks by contract address. On Ethereum, BNB Chain and Base a buy-then-sell simulation runs beside a reference check, and when the two disagree the scan shows both instead of picking one.
• Wallets, entities and exchange reserves — Wallet profiles, a flow-graph visualizer with filters by amount, direction and token, grouping of addresses by entity, expanding the next hop in place and shareable view links, labelled addresses, and exchange and fund books in which every address claim carries its source and confidence.
• Smart money on Ethereum, by profit and by earliness — Smart Money by Profit ranks wallets by realized and unrealized PnL, win rate and worst trade, measured from each wallet's own swaps at its own fill price; exits it cannot price are counted, never estimated. A second board ranks wallets by how early they bought tokens that later became popular.
• Bitcoin on-chain cycle metrics — MVRV, NUPL, SOPR, supply in loss, cycle position, short-term-holder inflow to exchanges and exchange netflow.
• Account self-service: delete, MFA, sessions, CSRF — Self-service account deletion (DELETE /api/v1/auth/account) reuses the admin erasure pipeline — personal data is purged, the financial record stays for legal balance with the identity redacted. Every state-changing auth route (change-password, change-email, logout, mfa/*, logout-all, keys, billing/*) enforces a double-submit CSRF token; per-IP and per-email rate limits defend register/login/forgot-password/resend-verification; scan history is scoped to the caller's user_id (audit 2026-10-11).
• Derivatives and capital flows — Funding, open interest, liquidations, perpetual-DEX volume, stablecoin net flows, ETF flows and sector rotation.
• Transaction receipts — A printable receipt for a transaction hash on EVM chains, Bitcoin, Solana, Tron, Aptos and Sui.
• Alerts and developer API — Alert rules in the app and on Telegram; API keys with a monthly meter on the plans that include the developer API.
• Chains — 45 chains in the scanner registry, each admitted by measuring its endpoints rather than from memory.
• Address labels — ~40.8 million labelled addresses (about 956,000 curated): 955,972 curated labels plus 40,227,004 addresses from public research datasets, each answer carrying its source and confidence tier (verified, inferred or community); an address in both is counted in each. Updated 2026-10-30.
• Real-money payments — Deposits in ETH or USDC to a deposit address of your own on Base; plans are paid from that balance; auto-renew can be switched off in Account (access continues to the end of the paid period); withdrawals are capped per day (up to $1,000 per account). See pricing.

In progress

• Engine coverage — The live count is on the status page, broken down by product group (Scanner, Market Data, On-Chain, Macro, Forensics, Receipts, Alerts), with the result of the latest sweep of every data card. A card whose input is down says so instead of showing a zero. Inputs we retired after our own engines replaced them are not counted.
• Clearer waiting states — A panel still waiting for its data shows a placeholder and, if the wait runs long, says what it is waiting for and links to the status page.
• Ethereum history — The Ethereum index keeps a rolling window of about two months, filled one closed day at a time.
• A year of Bitcoin exchange netflow — Rebuilt backwards one closed day at a time; each rebuilt day says how many of today's exchange addresses existed then.

Not done yet

• Who runs DeepGyre — The operator name and jurisdiction are not published yet; the contact page shows each one as missing rather than a stand-in. The official contact email is published: [email protected].
• Legal review — The Terms of Service and the Privacy policy describe the software as built and say at the top that no lawyer has reviewed them yet.
• Independent security review — No outside audit or penetration test has taken place, and there is no bug-bounty programme yet.
• SDK packages — Single-file Python and JavaScript clients download from the API reference; neither is on a package registry yet.
• Testimonials and case studies — None are shown, because none can be checked yet. They will appear when they are real.

Something missing from these lists, or a line here that is no longer true? Tell us.