Approval Scanner for Connected Site

WHAT IT DOES

The Approval Scanner for Connected Site scans the current webpage for any Ethereum addresses—including token contracts, spender contracts, and externally owned accounts—then checks each one against your connected wallet to determine if you have previously granted ERC‑20 token approvals. For every detected address, it generates a security report showing whether the address is a contract or an EOA, whether you have an active approval (and the allowance amount if available), a risk level assessment (low/medium/high/unknown), and a contract verification status link. This gives you a comprehensive view of your exposure across every address on the page, helping you quickly identify potentially risky approvals you may have forgotten about.

WHERE IT RUNS

It runs as a draggable overlay panel inside the BotGentz browser extension on any website—Etherscan, DEX interfaces (Uniswap, SushiSwap), NFT marketplaces (OpenSea, Rarible), DeFi dashboards (Zapper, DeBank), or even regular web pages that happen to display Ethereum addresses in text, links, or data attributes. It works wherever an address appears.

HOW TO USE

1. Install the free BotGentz extension and ensure you have an EVM-compatible wallet extension installed (e.g., MetaMask, Rabby, Trust Wallet).

2. Navigate to any page that contains Ethereum addresses (e.g., a DEX swap page, an NFT marketplace, or a block explorer).

3. Click the BotGentz icon and select "Approval Scanner for Connected Site" from the tools menu.

4. The panel opens. Click the "Scan Page" button.

5. Wait a few seconds while the tool extracts addresses, connects to your wallet, and queries on-chain data.

6. Review the results: each address is listed with its type (contract/EOA), risk level, and approval status.

7. Click "Copy Results" to copy the full report to your clipboard.

8. Drag the panel to reposition it, resize it, collapse it, or press Escape to close.

THE ACTUAL MECHANISM — DOM address extraction with on-chain allowance resolution

This tool works in two phases. First, it performs DOM scanning to extract all Ethereum addresses from the page. It uses multiple strategies: regex matching on visible text (looking for 0x-prefixed 40‑character hex strings), attribute inspection on links and data attributes (href, data-address, data-contract), and heuristic detection on interactive elements that commonly wrap address references. Each unique address is deduplicated and cached. Second, for each detected address, it connects to your wallet via window.ethereum and performs a series of on-chain checks: (a) it calls eth_getCode to determine if the address is a contract or an externally owned account; (b) if it is a contract, it uses a predefined list of common token standards (ERC‑20, ERC‑721, ERC‑1155) and attempts to call the allowance() function using the connected wallet's address as the owner—this yields the exact allowance amount if any approval exists; (c) it builds a verification URL for the explorer matching the current domain (Etherscan, BscScan, PolygonScan, etc.) to provide a quick link to the contract's source code. All of this happens without writing any data to the blockchain—it is entirely read-only—and uses the ethers.js library loaded at runtime for ABI encoding.

THE PANEL

The panel is fully draggable by its title bar and snaps to the nearest edge of the viewport when released. You can resize it horizontally by dragging the left or right border; the height expands to fit content up to a maximum, with scrolling inside the results list. A collapse button minimizes the panel to a small floating chip showing "⚙️ Approval Scanner" — click it to expand back. Press Escape at any time to close the panel entirely. The panel remembers its last position, size, and expansion state per domain via localStorage.

PLEASE NOTE

- This tool requires the free BotGentz extension and a real EVM wallet extension (e.g., MetaMask) already installed in your browser. It does not include a wallet—it connects to the one you already have.

- This tool works only on EVM‑compatible chains (Ethereum, BSC, Polygon, Arbitrum, Optimism, and others supported by your wallet).

- The tool is read‑only—it never submits transactions or modifies approvals. It only queries on‑chain data.

- This tool cannot detect approvals for tokens that use proxy patterns where the allowance is stored in a different contract (e.g., some upgradeable proxies). It cannot determine if a contract is malicious based solely on bytecode or verification status. It cannot scan addresses that are not standard Ethereum addresses (ENS names, etc.) without resolution.

- No private keys, seed phrases, or sensitive data are ever read, stored, or transmitted. All queries are made through your wallet's provider. Only anonymized usage metrics (panel open/close, scan events) are collected; you can disable this in the extension settings at any time.