Drainer Script Signature Detector

WHAT IT DOES

Drainer Script Signature Detector provides AI-powered analysis of pending transaction call data to identify drainer script signatures before they are executed. Analyze function signatures to detect approval phishing patterns where users are tricked into signing unlimited token approvals. Detect permit (EIP-2612) signature exploitation that bypasses the approve transaction. Identify token draining functions that transfer assets out of your wallet. Analyze delegatecall usage that can proxy to malicious implementations and drain funds. Examine proxy patterns that obscure the true target of the transaction. Compare against known drainer contract signatures to identify previously reported malicious patterns. The AI translates these technical findings into a plain-language verdict — Drainer Signature Detected, Suspicious, Legitimate Transaction, or Needs Review — with specific function flags and a clear explanation of what the transaction will actually do to your wallet, what assets would be affected, and what permissions the transaction is requesting.

HOW TO USE

1. Connect your Web3 wallet (Ethereum, Polygon, Arbitrum, Optimism, BSC, or any EVM-compatible chain).

2. Select the network that matches your target chain from the dropdown.

3. Paste the pending transaction call data (the raw hex data from your wallet's signature request).

4. Optionally enter the contract address the transaction will interact with.

5. Select detection depth (standard or deep).

6. Click "detect drainer signature" to analyze the call data and generate an AI explanation.

7. Review the verdict, specific function and pattern flags, and clear explanation of what the transaction does.

8. Make an informed decision about whether to sign the transaction.

9. Remember: the AI explanation informs your decision, but your wallet's signature prompt is what actually protects you — always review it before signing.

TECHNICAL MECHANISM

Drainer Script Signature Detector reads the pending transaction call data and decodes function signatures. The tool identifies common function signatures — approve(address,uint256), permit(...), transferFrom(...), sweep(address,uint256), safeTransferFrom(...), execute(...), and multicall(...). It detects unlimited approvals by scanning for type(uint256).max values (0xffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff) and large approvals that indicate significant token exposure. It identifies permit signatures (EIP-2612) that can be exploited without a separate approve transaction. It recognizes delegatecall patterns that can proxy to malicious implementations. The parsed call data is then passed to the AI bridge (BGAI.generate) which produces a structured verdict in plain language. The AI explanation is capped at 1,024 tokens and focuses on what the transaction actually does and what assets would be affected. The tool presents the verdict and specific flags before the user signs the transaction, enabling an informed decision.

WHAT IT CANNOT SEE

This tool cannot guarantee detection of all drainer scripts — scammers may use novel function signatures or obfuscation techniques not yet recognized. It cannot detect off-chain social engineering or phishing pages that exist outside the transaction. It cannot verify that a signature is malicious rather than legitimate — some legitimate transactions request token approvals. It cannot ensure that all known drainer patterns are recognized. The AI analysis is based solely on call data and contract data — it cannot detect off-chain intent, social engineering, or the context behind the transaction. Always verify critical information independently and never rely solely on automated analysis for financial decisions. The AI explanation is generated and does not replace reviewing what you are actually signing in your wallet.

PLEASE NOTE

Drainer Script Signature Detector supports EVM-compatible blockchains only (Ethereum Mainnet, Goerli, Polygon, Arbitrum One, Optimism, BNB Smart Chain, and others via network selection). The tool requires a free API key for the AI bridge. The tool never submits transactions or signs messages; it is strictly read-only. The AI explanation is generated after analyzing call data — always review your wallet's signature prompt before approving any transaction. Never sign transactions you don't fully understand. If you suspect a drainer, reject the transaction and revoke any previously granted approvals. The tool cannot detect off-chain phishing pages or social engineering. Deep detection may take longer but provides more thorough analysis.