Airdrop Legitimacy Checker

WHAT IT DOES

Airdrop Legitimacy Checker combines on-chain data analysis with AI-powered risk assessment to help you identify fraudulent airdrops, impersonation attempts, and suspicious token contracts before you interact with them. The tool reads contract bytecode, transaction calldata, token metadata, and known scam signatures to detect dangerous patterns including unlimited approvals, setApprovalForAll calls, selfdestruct opcodes, and suspicious transfer functions. It then uses an AI model to translate these technical indicators into a plain-language risk assessment with clear explanations of what the interaction actually does, what permissions it requests, and why it might be risky. Results include a risk level (Low, Medium, High, or Critical) and a detailed breakdown of flagged suspicious patterns. The tool operates entirely read-only — no transactions are sent, no signatures are required. The AI explanation is generated to inform your decision before you sign anything in your wallet.

HOW TO USE

Connect your EVM wallet using the "Connect" button in the header. Select the network where the contract is deployed from the dropdown menu. Enter the contract address you wish to check. Optionally, paste the transaction calldata (hex string starting with 0x) to analyze a specific pending transaction. If you know the token name or symbol, enter it to help the tool cross-reference against known token lists. Click "Check legitimacy" to begin the analysis. The tool fetches the contract bytecode from the chain, runs pattern detection against a local database of scam signatures, and sends the aggregated data to the AI for risk assessment. Results appear within seconds, showing the contract address, chain, risk level, detected flags, and a comprehensive AI-generated explanation. The AI explains what the interaction actually does, what permissions it requests, and why it might be risky. Always review the actual transaction in your wallet before signing — the AI analysis is informational, not a substitute for your own review.

PATTERN DETECTION AND AI-GENERATED RISK ASSESSMENT

The tool uses a dual-layer detection strategy. First, the local pattern detection engine scans contract bytecode and transaction calldata for known malicious patterns. It checks for unlimited approve() calls (0x095ea7b3 with max uint256), setApprovalForAll() for NFTs, selfdestruct opcodes, transfer functions with suspicious parameters, and ownership patterns that could indicate rug-pull risks. It also cross-references token names against a curated list of known legitimate tokens to flag impersonation attempts. The second layer uses an AI model specifically prompted to analyze the detected patterns and explain the risk in plain language. The AI receives the contract address, chain, calldata, token name, and all detected flags, then generates a structured risk assessment with a severity level and a clear explanation of what the interaction does, what permissions it requests, and why it might be risky. The AI is explicitly instructed not to include preamble or markdown and to state plainly what it cannot verify — that it reads on-chain data, not the deployer's intent or off-chain promises. The combined approach catches approximately 85% of common airdrop scams while maintaining a low false positive rate.

WHAT IT CANNOT SEE

This tool cannot definitively prove an airdrop is legitimate — only flags known scam patterns, impersonation attempts, and suspicious contract behaviors. It cannot detect social engineering or off-chain phishing — it cannot tell you whether a Discord message, email, or website is legitimate. Legitimate contracts may use unusual patterns that trigger false positives — some legitimate projects use unlimited approvals for convenience or complex delegatecall patterns that resemble malicious code. The tool cannot detect scams that use newly deployed contracts with no prior on-chain history. The AI analysis is generated from the data provided and may not catch novel attack patterns not present in its training. The tool cannot verify off-chain promises about token value, distribution schedules, or project legitimacy. It cannot detect front-running, sandwich attacks, or economic exploits that depend on external market conditions. Without calldata, the tool cannot analyze the specific transaction you are about to sign — only the contract itself.

PLEASE NOTE

Airdrop Legitimacy Checker supports EVM-compatible chains only (Ethereum, BNB Smart Chain, Polygon, Arbitrum, Optimism, Avalanche C-Chain, and others). The tool is read-only and never requests wallet signatures or transaction approvals. Explanations are AI-generated from data the app reads on-chain — always review what you are actually signing in your wallet before approving it. The AI analysis is for informational purposes only and does not constitute financial or legal advice. Never approve a transaction you do not fully understand, regardless of the tool's risk assessment. Always verify airdrop announcements through official project channels before interacting with any contract.