Approval Grant Time Tracker

WHAT IT DOES

Approval Grant Time Tracker is a security tool that monitors the timing of wallet approval requests to detect potential phishing attempts. When you visit any webpage, the tool starts a timer and continuously tracks page load time and your interaction activity. If a wallet approval request is detected (via DOM analysis for contract addresses and approval-related keywords like "approve" or "setApprovalForAll"), the panel displays the elapsed time since page load with a color-coded status indicator: green for safe (above configurable threshold), yellow for caution (approaching threshold), and red for danger (far below threshold). The tool warns you if an approval is requested within a configurable "cooldown" period (default 10 seconds), flagging it as potentially malicious since legitimate sites rarely request approvals immediately upon page load. For moderately fast approvals (between cooldown and the minimum safe time), the tool displays a caution warning and requires you to acknowledge the short time elapsed before proceeding. The tool also tracks approval timing patterns across sessions, building a history per domain to identify sites that consistently request approvals too quickly, helping you recognize repeat offenders.

WHERE IT RUNS

This overlay operates on any website (matching all URLs) across the entire web. It works in any browser that supports the BotGentz extension framework and has an EVM-compatible wallet extension installed. The panel activates on every page, starting a timer and scanning for approval-related content.

HOW TO USE

Install the extension and connect your wallet. The tool automatically begins tracking time on every page you visit. Navigate to any website—the panel displays a timer showing how long you've been on the page, your last interaction time, and a status indicator. If the page contains contract addresses or approval keywords, the tool evaluates whether the approval request timing is safe. If an approval is requested too soon, the panel displays a warning with the exact elapsed time, the configured thresholds, and instructions to wait or acknowledge the risk. Configure your settings: set the "minimum safe time" (default 30 seconds) and "cooldown threshold" (default 10 seconds) to match your risk tolerance. Enable or disable notifications for fast approvals. Use the "Save Settings" button to apply changes. The "Copy Report" button exports a summary of the current page's time data and history for your records. The tool also tracks approval timing history per domain, visible in the history section.

MECHANISM: PAGE LOAD TIMING ANALYSIS WITH INTERACTION TRACKING

The core security insight behind this tool is that malicious sites often rush users into approvals before they have time to evaluate the page. The extension implements a timing analysis engine that (1) captures the page load timestamp using Date.now() on DOMContentLoaded, (2) tracks user interactions (clicks, keypresses, scrolls) to distinguish active users from idle sessions, and (3) continuously monitors the DOM for approval-related patterns using MutationObserver and periodic text scanning. When approval-related content is detected, the tool calculates the elapsed time since page load and since the last user interaction, then compares these values against the configured thresholds. The tool's detection engine scans for contract addresses (0x... patterns) and approval keywords ('approve', 'setApprovalForAll', 'allowance', 'permit', 'grant', 'authorize') in the page text. The color-coded status system uses red (less than cooldown threshold), yellow (between cooldown and minimum safe time), and green (above minimum safe time) to provide an intuitive visual assessment. The tool also maintains a persistent history using GM_setValue, storing each detected approval attempt with the domain, elapsed time, and timestamp, allowing it to calculate average approval times per domain and identify patterns over time. The notification system uses GM_notification to alert you to high-risk situations even when the panel is collapsed or minimized.

THE PANEL

The overlay panel is fully draggable via its title bar and remembers its position per-site using GM_setValue. It snaps to the nearest edge when dragged within 40px of any screen boundary. The panel includes clear sections for time tracker (domain, wallet address, page load timer with color-coded status, last interaction time, average approval time for the domain, detected contracts, and approval keywords), danger/caution warnings (when applicable, with confirmation checkboxes and an acknowledge button), history (recent approval timing entries for the current domain), settings (minimum safe time input, cooldown threshold input, notification toggle, retention period selector), and action buttons (Save Settings, Clear History, Copy Report). The timer display updates every 10 seconds, showing the elapsed time and current status. Pressing Escape temporarily dismisses the panel until you navigate to a new page or manually reactivate. The panel automatically re-scans when new content loads or when approval keywords appear.

PLEASE NOTE

This extension requires the free BotGentz framework extension to be installed and active. You must also have a real EVM-compatible wallet extension (such as MetaMask, WalletConnect, Coinbase Wallet, or Rabby) already installed in your browser—the overlay uses your wallet's RPC provider for wallet context and approval detection. This tool is read-only—it does not modify, block, or intercept wallet approval popups (wallet UI is browser-native and not accessible). It only tracks timing, displays warnings, and requires acknowledgment for fast approvals. The tool cannot detect approval requests that originate from wallet popups directly; cannot track time for approvals that happen via background scripts or without page interaction; cannot detect if the user was active on the page before the tool was installed; depends on DOM analysis which may not catch all approval triggers; does not support non-EVM chains where approval patterns differ; and cannot prevent approvals if the user confirms in their wallet regardless of warnings. No private keys, wallet balances, browsing history, or approval data are ever collected, transmitted, or stored outside your local browser—all data is stored locally using GM_setValue. This tool is a security aid, not a guarantee—always verify the website and contract address independently before approving any transaction.