Scam Contract Pattern Explainer

WHAT IT DOES

Scam Contract Pattern Explainer reads live on-chain data from any EVM contract or transaction and uses AI to detect known scam signatures, malicious patterns, and high-risk behaviors. It examines contract bytecode for selfdestruct operations, hidden owner minting functions, fee-on-transfer mechanics, rebase manipulations, and unlimited approval patterns. For transactions, it decodes input data to identify function calls like approve(), transfer(), or privileged owner methods, then flags suspicious intent. It also scans event logs and wallet transaction history to identify proxy upgrade risks, ownership transfers, and unusual privileged function calls. The AI generates a plain-language risk assessment explaining exactly what the contract or transaction does, what it can access, and what the potential dangers are before you interact with it.

HOW TO USE

Paste any EVM contract address or transaction hash into the input field. If you paste a contract address, the tool reads its bytecode and analyzes function signatures, known opcode patterns, and proxy implementations. If you paste a transaction hash, it reads the transaction details—sender, recipient, value, input data, and block number—then analyzes the called contract's bytecode. The AI returns a structured risk assessment labeled HIGH, MEDIUM, or LOW, along with a plain explanation of the risks. The wallet connection is optional but recommended for reading live data from your current network. You can also switch networks manually in the dropdown to scan contracts deployed on different EVM chains.

ON-CHAIN PATTERN DETECTION AND FALLBACK SCANNING

The tool decodes contract bytecode by disassembling EVM opcodes and scanning for known malicious patterns. It detects selfdestruct (0xff) opcodes, delegatecall proxies, and ownership transfer functions that can be triggered by arbitrary callers. It identifies standard function signatures like approve() (0x095ea7b3), transfer() (0xa9059cbb), and transferFrom() (0x23b872dd), then checks if they include hidden modifiers or access controls that bypass normal checks. For proxy contracts, it reads the implementation address from the proxy storage slot and analyzes the implementation bytecode recursively. If the primary RPC endpoint fails or rate-limits, the tool retries with exponential backoff and falls back to alternative read-only endpoints to ensure analysis completes. The AI prompt includes the actual bytecode and transaction data read from the chain—not generic advice—so the explanation is specific to the contract you are examining.

WHAT IT CANNOT SEE

This tool cannot detect off-chain scam coordination, social engineering, or phishing attempts that occur outside the blockchain. It cannot analyze bytecode that is obfuscated beyond EVM disassembly limits—some contracts use anti-analysis techniques that hide their true behavior. It cannot verify contract source code match against third-party verification services like Etherscan; it only reads the deployed bytecode directly. It cannot detect malicious intent in upgradeable proxy patterns beyond reading the current implementation—a proxy could be upgraded to a malicious implementation later, and this tool only shows the current state. It cannot see pending transactions not yet included in the mempool. It cannot analyze contracts that are not deployed on the connected chain.

PLEASE NOTE

EVM chains only. This tool reads on-chain data and generates AI explanations—it does NOT sign transactions or execute any on-chain actions. The wallet's own signature prompt is still the final gate for every real action. Always review the exact transaction details in your wallet before approving any signature. The AI assessment is informational only and does not constitute financial or security advice. Always verify contract addresses against official project documentation.