Fake Token Address Warning Overlay

WHAT IT DOES

Fake Token Address Warning Overlay is a DeFi security tool that watches the current page for token addresses (0x + 40 hex chars), then queries the connected EVM chain via window.ethereum to check token metadata (symbol, name, decimals, total supply) and compares against known legitimate token lists to identify potential fake or impersonating tokens. It scans the page for token address patterns, queries the chain for token metadata and contract code, checks if the contract implements token standards (ERC-20, ERC-721, ERC-1155), and displays a visual warning overlay (verified/suspicious/fake) next to each detected token address based on the comparison results.

WHERE IT RUNS

This tool operates as a panel within the BotGentz browser extension, available for Chrome, Firefox, Edge, and Brave. It works on any webpage displaying token addresses, smart contract addresses, or similar blockchain data. Common sources include block explorers, DEX interfaces, token listing pages, DeFi dashboard sites, and social media platforms where token addresses are shared.

HOW TO USE

Navigate to any page that displays token addresses. Open the BotGentz extension and select Fake Token Address Warning Overlay from the tool menu. The panel will appear on the side of your browser. Click the "Connect Wallet" button to connect your EVM wallet (MetaMask or compatible). Click the "Scan & Verify" button to detect token addresses on the page and analyze them. The tool will overlay a color-coded badge (green for verified, yellow for suspicious, red for fake) next to each detected address. You can customize the verification source, add addresses to an ignore list, and configure auto-scan behavior. Use the "Clear Badges" button to remove all overlays.

TECHNICAL SECTION — TOKEN VERIFICATION PIPELINE

This tool uses a multi-stage pipeline to detect fake tokens. First, it scans the page DOM for Ethereum address patterns using a regex that matches 0x + 40 hexadecimal characters, and checks data attributes that may contain address information. Second, it deduplicates found addresses and filters them against an ignore list. Third, it queries the connected EVM chain via window.ethereum using eth_getCode to determine whether each address is a contract address (has bytecode) and then uses eth_call to check for ERC-20 interface methods (totalSupply, balanceOf, transfer, transferFrom, approve, allowance) to confirm it is a token contract. Fourth, it retrieves token metadata (symbol, name, decimals, totalSupply) from the chain using eth_call with the standard ABI function signatures. Fifth, it compares the retrieved metadata against a built-in list of known legitimate tokens, checking for exact matches, partial matches, and impersonation patterns (e.g., a token using the same symbol as a known token but with a different address). Sixth, it generates a risk assessment based on the comparison results and metadata quality. Finally, it overlays a color-coded badge (green for verified, yellow for suspicious, red for fake) on the page next to each detected token address, providing immediate visual feedback to the user.

THE PANEL

The side panel is designed for seamless integration into your browsing workflow. You can drag it to either side of the window, and it remembers your preferred position per website. It supports snap-to-edge behavior and can be collapsed to a small tab for minimal distraction. The panel is resizable horizontally and vertically, with a minimum width of 280px and maximum of 600px. Pressing the Escape key closes the panel. All settings are saved locally.

PLEASE NOTE

This tool requires the free BotGentz extension and a real EVM wallet extension (such as MetaMask) already installed in your browser. It works with EVM-compatible chains (Ethereum, Polygon, Arbitrum, Optimism, etc.). Cannot detect all fake tokens; relies on a known list of legitimate tokens which may be incomplete. Some legitimate tokens may not be in the list. Cannot detect tokens that impersonate a legitimate token's name/symbol without being in the list. Requires the page to display token addresses in a detectable format. Does not guarantee safety. Websites change their page formats frequently, and extraction scripts may need periodic updates. This tool does not store or transmit page content except for the address queries sent to the EVM network. No browsing history or personal data is collected or retained.