they have it and they announced exchanges. they don't need to have it on github and opensourse it
They don't need to do anything, as long as you trust them. But - no smart contract available, no sources on github, no technical paper, a letter-box company registered just a couple of days ago in Switzerland with the sole company director who is not listed in the white paper or anywhere else, arbitrary changes to the terms after a sale, and other IMHO red flags mentioned before.