Spender Contract Trust Checker

WHAT IT DOES

Spender Contract Trust Checker reads the spender address from an approval transaction, checks whether the spender is a contract, and analyzes its trustworthiness. It retrieves the contract's verification status (whether the source code is publicly available and matches the on-chain bytecode), contract name, compiler version, and age (time since creation). The tool provides a trust assessment with a clear rating (High, Medium, Low, or Unknown) and an AI explanation of the contract's trustworthiness and risks.

HOW TO USE

When your wallet prompts you to sign an approval transaction, copy the transaction hash from your wallet or the requesting dApp. Open the Spender Contract Trust Checker, connect your EVM wallet, and paste the transaction hash into the input field. Click "Look up transaction" to fetch the approval details and generate a trust assessment. Alternatively, click "Manual entry" to enter the spender contract address directly. The tool will display the spender contract details, verification status, contract name, compiler version, age, and a trust assessment with a colored badge. Review the AI explanation to understand the spender's trustworthiness and what risks to consider before approving.

TECHNICAL SECTION — CONTRACT TRUST ASSESSMENT

The tool fetches transaction data from the blockchain using the connected wallet's provider. It decodes the function signature and arguments to identify the spender address. The tool then checks whether the spender address is a contract by retrieving its code. For contract addresses, it looks up verification status using a local database of known verified contracts (representing the verification check that would be performed by a blockchain explorer). The tool extracts contract metadata including name, compiler version, and age. The trust level is determined based on verification status and age: verified contracts with long histories are rated High, unverified contracts are rated Medium, and newly created or suspicious contracts are rated Low. The AI layer receives the contract data and generates a plain-language trust assessment. This approach helps you understand whether the spender contract is legitimate before approving.

WHAT IT CANNOT SEE

This tool cannot determine if a verified contract contains malicious code that is obfuscated or hidden. It cannot detect proxy contracts that delegate to unverified implementations. It cannot determine if the spender contract is a known malicious contract without an external database. It cannot read the actual intent behind a spender contract's design. It cannot guarantee that a verified contract is safe to interact with. The user must still verify the transaction details in their wallet before signing. The AI assessment is generated from on-chain data and does not constitute financial advice or a security guarantee.

PLEASE NOTE

EVM chains only. Assessments are AI-generated from data the app reads on-chain—always review what you are actually signing in your wallet before approving it. The wallet's own signature prompt remains the final and only protection against unwanted approvals. This tool is read-only; it never sends transactions or signs anything on your behalf.