Contract Interaction Whitelist Explainer
Free to download on every platform. Comes pre-installed on BotFone, BotPad and BotFlip — with extra free apps included.
About this app
WHAT IT DOES
Contract Interaction Whitelist Explainer analyzes a contract's interaction whitelist and explains the risk of being locked out before you invest or interact. The tool reads the contract to detect whitelist functions, removal mechanisms, owner address, total supply, and holder count. When your wallet is connected, it also checks whether your address appears to be on the whitelist. It then identifies concerning patterns — owner-only whitelist control, no removal mechanism, dynamic whitelist, whitelist function callable by anyone, or whitelist with suspicious patterns. The tool then uses AI to generate a plain-language explanation of the whitelist mechanism: who can interact with the contract, who controls the whitelist, the current status of your wallet if connected, and the risk of being locked out. Results include a risk level, safety score (0-100), total supply, holders, whitelist function status, removal function status, wallet whitelist status (if connected), owner address, flags, and a comprehensive AI-generated explanation. The tool operates entirely read-only — no transactions are sent, no signatures are required. The AI assessment is designed to help you understand the risks of a contract's whitelist before you interact.
HOW TO USE
Connect your EVM wallet using the "Connect" button in the header — this allows the tool to check if your wallet is on the whitelist. Select the network where the contract is deployed from the dropdown menu. Enter the contract address you wish to analyze. Optionally enter the contract name if you know it. Click "Explain whitelist risk" to begin the analysis. The tool reads the contract to detect whitelist functions, removal mechanisms, owner address, and holder data, checks your wallet's whitelist status, and sends the data to the AI for a plain-English whitelist explanation. Results appear within seconds, showing the contract, chain, risk level, safety score, total supply, holders, whitelist function status, removal function status, wallet whitelist status, owner address, flags, and a comprehensive AI-generated explanation written in clear, conversational language.
WHITELIST RISK DETECTION AND SCORING
The tool uses a pattern-based approach to detect whitelist risk from the contract bytecode. It scans for whitelist-related keywords (whitelist, allow) and removal-related keywords (remove with whitelist/allow). The total supply is read from the contract, and the holder count is estimated. If a wallet is connected, the whitelist status is simulated based on the contract patterns. The safety score (0-100) starts at 50 and is adjusted based on: whitelist function (present: -0, not present: +20), removal function (present: +15, not present: -10), wallet whitelisted (+20 if yes, -20 if no), and risk level penalties. The risk level is determined by: wallet not whitelisted (Critical), no removal function (High), whitelist with owner controls (Medium), and no whitelist function (Low). The AI receives all this data and is prompted to explain the whitelist mechanism in plain language — stating who can interact with the contract, who controls the whitelist, the current status of your wallet if connected, and the risk of being locked out. The AI is also instructed to state plainly what it cannot verify — that it reads the whitelist function and configuration from the contract, not the owner's off-chain intent, future behavior, or the legitimacy of the mechanism.
WHAT IT CANNOT SEE
This tool cannot definitively determine if a whitelist is safe — only reads the whitelist function and configuration. It cannot detect off-chain coordination or malicious intent not reflected in on-chain data — a contract with a reasonable whitelist could still be a scam. The tool cannot predict future whitelist changes — a contract that whitelists you now could remove you later. Legitimate contracts may have whitelists for valid reasons — whitelists are often used for compliance or phased rollouts. The tool cannot verify the identity or trustworthiness of the contract owner — it only reads the owner address. The tool cannot detect if the whitelist function is properly implemented. The tool cannot detect if the owner is using the whitelist to manipulate the contract. The tool cannot predict the future performance of the contract. The tool cannot verify that the whitelist is correctly enforced.
PLEASE NOTE
Contract Interaction Whitelist Explainer supports EVM-compatible chains only (Ethereum, BSC, Polygon, Arbitrum, Optimism, Avalanche, and others). The tool is read-only and never requests wallet signatures or transaction approvals. Whitelist assessments are AI-generated from on-chain data — always verify contract whitelist mechanisms through block explorers, official documentation, and independent research before interacting. The AI assessment is for informational purposes only and does not constitute financial or legal advice. Whitelist functions can be used for legitimate purposes or to lock out holders — always consider who has control over the whitelist and how it might affect you before interacting with the contract.