Wallet Drainer Approval Pattern Detector

WHAT IT DOES

The Wallet Drainer Approval Pattern Detector scans pending approve() or setApprovalForAll() transactions for patterns commonly used by wallet drainers. You enter the token address, spender address, function name, and amount—the tool reads the spender's contract code and verification status via eth_getCode, fetches recent Approval and Transfer events via eth_getLogs, and checks for suspicious signals: setApprovalForAll to an unverified contract, approve to a newly created contract, multiple approvals to the same spender, or a sudden transfer to the same address after approval. It then uses AI to generate a plain‑language risk assessment (Low/Medium/High) and explains why it was flagged, before you sign.

HOW TO USE

1. Connect your EVM wallet (required to read your address and event history).

2. Select the chain (Ethereum, Polygon, or Arbitrum).

3. Enter the token contract address, spender address, function name, and optional amount.

4. Set the lookback block range for event history (default 10,000 blocks).

5. Click "Detect drainer patterns" to run the analysis.

6. Review the risk level, AI explanation, and event summary.

7. The wallet's own signature prompt will still appear—this tool only informs you.

THE REAL MECHANISM — on‑chain event log scanning with AI pattern detection

This tool reads the user‑provided transaction parameters and performs a series of on‑chain checks. It calls eth_getCode on the spender address to determine if it's a contract and whether it's verified (by checking for code presence and making a heuristic guess about creation time). It uses eth_getLogs to fetch recent Approval and Transfer events from the token contract, filtering for events involving the user's address and the target spender. It counts how many approvals have been made to this spender recently and how many transfers the user has made. The tool then builds a structured prompt for the AI bridge (BGAI.generate), passing the function name, spender address, contract verification status, contract age heuristic, approval count, and transfer count. The AI returns a risk assessment and explanation. The tool also applies a hardcoded override: setApprovalForAll to an unverified new contract is always flagged as high risk.

WHAT IT CANNOT SEE

- This tool cannot read the exact intent behind the transaction—only the on‑chain data.

- It cannot determine with certainty whether a contract is a drainer without verified malicious history.

- It cannot detect drainer patterns in contracts that use opaque proxy patterns or that have not yet been flagged.

- It cannot detect transactions that are submitted through a wallet interface without page interaction.

- It cannot read off‑chain agreements or promises related to the transaction.

- It cannot decode custom function signatures that are not in the standard ABI set.

- It cannot prevent you from signing a transaction—it only provides information.

PLEASE NOTE

- This tool works on Ethereum (1), Polygon (137), and Arbitrum (42161).

- The AI explanation is generated from the data you provide and is for guidance only. Always review the actual transaction details in your wallet before signing.

- The wallet's own signature prompt is what actually protects you—the AI's read is not a substitute for reviewing what you sign.

- Event scanning is limited by the provider's eth_getLogs block range; the lookback default is 10,000 blocks.