Suspicious Airdrop Contract Explainer

WHAT IT DOES

Suspicious Airdrop Contract Explainer reads live on-chain bytecode from any EVM airdrop contract and uses AI to detect suspicious claim mechanics, hidden fees, unlimited approvals, admin backdoors, and token theft risks. It examines the contract's claim function implementation to understand who can claim, what limits exist, and what approvals are required. It scans for token distribution logic, merkle proof verification, claim fee requirements, and claim deadlines. It detects admin functions like addRecipients, pause, withdraw, setFee, and blacklist/whitelist controls. It identifies transferFrom and approve patterns that could grant the contract unlimited access to your tokens. It also checks for upgradeable proxy patterns and owner capabilities. The AI generates a plain-language verdict—SAFE, RISKY, or CRITICAL—along with specific explanations of the airdrop risks before you claim.

HOW TO USE

Paste any EVM airdrop contract address into the input field. The tool reads the contract's bytecode and scans for known airdrop function signatures including claim() (0x4e71d92d), withdraw() (0x2e1a7d4d), setFee() (0x1a3044c4), setClaimFee() (0x53cf1536), addToWhitelist() (0xfa4c9e8d), removeFromWhitelist() (0x6a1a5a3e), pause() (0x3f4ba83a), unpause() (0x8456cb59), transferOwnership() (0xf2fde38b), renounceOwnership() (0x715018a6), and setImplementation() (0x51cff8d9). It also scans for common airdrop patterns including ETH fee requirements, token approval calls, blacklist/whitelist controls, admin withdraw functions, and merkle proof verification. The AI receives all this data and returns a verdict: SAFE (no suspicious patterns), RISKY (admin controls or fees present), or CRITICAL (unlimited approvals, withdraw capability, or selfdestruct). The AI also provides a detailed plain-language explanation of the specific claim risks, what approvals are requested, and whether the contract can steal your tokens.

BYTECODE PATTERN ANALYSIS AND APPROVAL DETECTION

The tool scans the contract's bytecode for dangerous approval patterns that can grant unlimited token spending. It detects transferFrom() calls that would allow the contract to move tokens from your wallet without your consent. It identifies approve() calls that could set an unlimited allowance to the contract or to an unknown address. It scans for msg.value usage in claim functions that would require you to pay a fee in native currency. It detects selfdestruct and delegatecall patterns that could allow the owner to destroy the contract or execute arbitrary code. It identifies administrative functions that can withdraw collected fees or claimed tokens, and checks whether these are protected by onlyOwner modifiers or are public. It also looks for merkle proof verification patterns, which indicate the contract is checking eligibility against a pre-built list—a legitimate pattern for many airdrops, but can be manipulated if the owner controls the merkle root. The tool does not require executing a transaction to detect these patterns; it reads the deployed bytecode directly from the chain.

WHAT IT CANNOT SEE

This tool cannot detect off-chain airdrop legitimacy or project authenticity—an airdrop contract could be perfectly safe on-chain but part of a larger scam. It cannot verify if the token being airdropped is legitimate or fake; a contract could airdrop scam tokens. It cannot analyze bytecode that is obfuscated beyond EVM disassembly limits. It cannot detect airdrop contracts that interact with external oracles for eligibility, where the claim logic depends on off-chain data. It cannot see pending claim transactions not yet in the mempool. It cannot verify the intent behind admin functions—a withdraw function could be for legitimate fee collection or for theft. It cannot detect airdrops that require you to connect to a malicious website or sign a separate off-chain message.

PLEASE NOTE

EVM chains only. This tool reads on-chain data and generates AI explanations—it does NOT sign transactions or execute any on-chain actions. The wallet's own signature prompt remains the final gate for every real action. Always review the exact transaction details in your wallet before approving any claim. Never approve unlimited token spending unless you fully trust the contract. The AI assessment is informational only and does not constitute financial or security advice. Always verify airdrop details independently through block explorers and official project announcements before claiming any airdrop.