Appreciate the caution — being skeptical of a new miner is the right instinct,
and I'd rather you kick the tires than take my word for it.
On the VirusTotal hits: that's the standard miner false-positive. Every GPU
miner — lolMiner, T-Rex, GMiner, SRBMiner, NBMiner — lights up VirusTotal with
the same RiskWare / CoinMiner / PUA labels, because a legitimate miner and a
malware miner use the exact same primitives: GPU compute kernels plus a stratum
connection to a pool. The engines flag the *category* ("this is a miner"), not
actual behavior — you won't see a real behavioral trojan in that list, just
heuristic miner labels. It also doesn't help that the build is currently
unsigned (no code-signing cert yet); that alone bumps the count. Signing is on
the list.
Don't trust my word — verify it:
- Run it in a VM and watch the traffic. It talks to the pool you configure,
plus the dev-fee pool for ~30s out of the hour (the 1% fee), and nothing
else. No telemetry, no phone-home.
- The 1% dev fee is documented down to the second in the README: how it works,
when it switches, and that it's rolling so restarting can't dodge it. I'd
rather over-explain it than have you find it in a debugger.
Ask me anything technical — I'll answer right here, or
admin@hydrax.gg. Not
asking for blind trust; asking you to verify and hold me to it.
