NFT Mint Contract Verifier Before Buy

WHAT IT DOES

NFT Mint Contract Verifier Before Buy analyzes NFT contract bytecode to identify security risks before you mint. It detects common red flags: self-destruct functions, ownership transfer/renounce functions, pause/unpause controls, withdraw functions, unlimited approvals, setApprovalForAll, proxy patterns (which can be upgraded), and more. Each finding is categorized by severity—Critical, High, Medium, Low, or Info—and a risk score (0-100) is calculated. A clear risk level (Low/Medium/High/Critical) helps you decide whether to proceed. Perfect for avoiding scams, rug pulls, and malicious contracts in high-demand NFT mints.

WHERE IT RUNS

Any webpage with NFT minting activity—NFT marketplaces, project launch pages, mint dashboards, and collector portals. The script automatically detects contract addresses from the page content, or you can paste the address manually. Works with any EVM-compatible chain (Ethereum, Polygon, Arbitrum, Optimism, etc.) as long as your wallet is connected to the correct network.

HOW TO USE

Install the script and navigate to any NFT mint page. Click "Connect Wallet" to link your MetaMask or other EVM wallet. The tool will detect the contract address automatically—verify it. Click "Verify Contract"—the tool fetches the bytecode and analyzes it for security patterns. Results show a risk score (0-100), risk level (Low/Medium/High/Critical), and a detailed breakdown of each finding with severity labels. Toggle "Auto-verify on contract detection" to automatically verify when a contract is detected. Keyboard shortcut: Ctrl+Shift+V to verify without opening the panel.

TECHNICAL MECHANISM

The script loads ethers.js v5.7.2 dynamically via a DOM-injected script tag, then creates a Web3Provider from window.ethereum. It fetches contract bytecode using provider.getCode(contractAddress). The bytecode hex string is scanned against a database of known security pattern signatures—including 4-byte function selectors for selfDestruct (0x5c975abb), transferOwnership (0xf2fde38b), renounceOwnership (0x715018a6), owner (0x8da5cb5b), pause (0x8456cb59), unpause (0x3f4ba83a), withdraw (0x2e1a7d4d, 0x3ccfd60b), setApprovalForAll (0xa22cb465), approve (0x095ea7b3), and proxy patterns (delegatecall, 0x363d9d8b). Each detected pattern is assigned a severity level and contributes to the risk score: Critical (+40), High (+25-30), Medium (+10-15), Low (+5), Info (+0). The final risk level is determined by the total score: 0-19 = Low, 20-39 = Medium, 40-59 = High, 60+ = Critical. Bytecode size is also reported as an additional indicator.

THE PANEL

The tool runs inside BGPanel, a lightweight UI system built into the BotGentz extension. Drag the panel by its header to reposition it anywhere on screen—it snaps to edges and remembers its position per site. Click the header to collapse the panel into a small bubble; click again to expand. Resize the panel by dragging its bottom-right corner. Press Escape at any time to close the panel. The panel stays out of your way but is always accessible via the extension's toolbar.

PLEASE NOTE

Requires the free BotGentz browser extension and a real EVM wallet extension (MetaMask, Coinbase Wallet, or any wallet that injects window.ethereum). The script supports EVM-compatible chains. This tool cannot detect all possible attack vectors, cannot guarantee contract safety even with no red flags, cannot verify off-chain intent, cannot detect malicious events that do not appear in bytecode analysis, and cannot guarantee source code matches bytecode without explorer verification. Always do your own research before minting. The script does not store or share any data—all processing happens locally in your browser.