Independent DeFi security desk · Status: operationalMethodology & corrections · Submit an incident

Tools

Simple research tools for safer DeFi decisions. They do not execute transactions or provide financial advice.

Read-only by design. These tools never connect a wallet, never request a private key or seed phrase, and never sign or execute a transaction. The address/URL check in particular is read-only; URL screening is not implemented in this build and returns a notice instead of a verdict.
⌕

Address and URL risk check

Screen a public address or URL against reported malicious activity. Read-only; no wallet connection.

▣

Token contract check

Review a public EVM token address using a security data provider. No signing or transaction execution.

✓

Protocol risk checklist

Work through contracts, oracles, liquidity, permissions and operational risks.

Open checklist →
↗

More research tools

Explore gas, wallet, bridge and DeFi research workflows as they become available.

Browse tools →

Read-only by design. These tools never connect a wallet, never request a private key or seed phrase, and never sign or execute a transaction.

Last updated: 2026-09-29 (comparisons.json review date). The descriptions below match the code as it runs today.

Address and URL risk check — input, output, data source, limits, last updated
Input
One text field. A valid EVM address (0x plus 40 hex characters) is looked up. Any other input, including a URL, is not looked up.
Output
For a valid EVM address: up to three reported flags whose value is "1" from the provider's result object ("Flags reported: …"), or "No listed flags returned. This is not a safety guarantee." For any non-EVM input, including a URL: "URL screening requires a configured provider. No wallet access was requested." — a notice, not a risk verdict. A provider failure returns "Provider unavailable … no conclusion was issued."
Data source
GoPlus Labs https://api.gopluslabs.io/api/v1/address_security/1. The chain id is hardcoded to 1 (Ethereum mainnet); there is no chain selector.
Risk limits
Read-only: no wallet connection, no private key or seed phrase request, no signing, no transaction. URL/website screening is not implemented in this build — a URL returns a "provider not configured" notice, never a risk result. Only Ethereum mainnet addresses are checked. Depends on a third-party provider being reachable. No listed flags is not a safety guarantee.
Last updated
2026-09-29 (comparisons.json review date).
Token contract check — input, output, data source, limits, last updated
Input
One text field; must be a valid EVM contract address (0x plus 40 hex characters). Invalid input returns "Enter a valid EVM contract address."
Output
Reads the provider's result for that address and reports only three selected signals: is_honeypot="1" → "honeypot signal", is_open_source="0" → "unverified source", is_proxy="1" → "proxy contract". Otherwise "No selected warning signals returned. This is not a safety guarantee." A provider failure returns "Provider unavailable … no conclusion was issued."
Data source
GoPlus Labs https://api.gopluslabs.io/api/v1/token_security/1. The chain id is hardcoded to 1 (Ethereum mainnet); the request accepts no chain parameter, so contracts on other chains are not checked.
Risk limits
Ethereum mainnet only (chain 1). Only three fields are inspected — this is not a full contract audit; it does not check ownership, liquidity, buy/sell tax, transfer restrictions or the other fields the provider returns. Read-only: no wallet connection, no private key or seed phrase, no signing, no transaction. Third-party dependent. Absence of the three signals is not a safety guarantee.
Last updated
2026-09-29 (comparisons.json review date).
Protocol risk checklist — input, output, data source, limits, last updated
Input
None. This card is a link to a static on-site checklist.
Output
Opens /tools/defi-risk-checklist. No form, no computed result.
Data source
On-site editorial content; no external data provider.
Risk limits
Editorial checklist only. It does not scan a contract, address or URL, and does not connect a wallet.
Last updated
2026-09-29 (comparisons.json review date).
More research tools — input, output, data source, limits, last updated
Input
None. This card is a link to the tools index.
Output
Opens /tools. No computed result.
Data source
On-site tools index; no external data provider.
Risk limits
Navigation only. The card describes gas, wallet, bridge and DeFi workflows "as they become available"; those workflows are not implemented in this build.
Last updated
2026-09-29 (comparisons.json review date).

How these tools work

Last updated 2026-09-29
ToolInputOutputData sourceRisk limitsLast updated
Address and URL risk check One text field. A valid EVM address (0x + 40 hex characters) is looked up; any other input, including a URL, is not. Up to three reported flags (value "1") from the provider result, or "No listed flags returned". Non-EVM/URL input returns a "provider not configured" notice, not a verdict. Provider failure = error, no conclusion. GoPlus Labs address_security/1 — chain 1 (Ethereum mainnet) hardcoded, no chain selector. Read-only: no wallet connection, no private key or seed phrase, no signing, no transaction. URL screening is NOT implemented — a URL returns a notice, never a risk result. Ethereum mainnet only. Third-party dependent. Not a safety guarantee. 2026-09-29
Token contract check One text field; must be a valid EVM contract address (0x + 40 hex characters), otherwise an input error. Only three signals from the provider result: honeypot, unverified source, proxy contract. Otherwise "No selected warning signals returned". Provider failure = error, no conclusion. GoPlus Labs token_security/1 — chain 1 (Ethereum mainnet) hardcoded, no chain parameter, so other chains are not checked. Ethereum mainnet only. Only three fields inspected — not a full audit (no ownership, liquidity, tax or transfer checks). Read-only: no wallet, no private key or seed phrase, no signing, no transaction. Not a safety guarantee. 2026-09-29
Protocol risk checklist None. This is a link. Opens /tools/defi-risk-checklist; no computed result. On-site editorial content; no external data provider. Editorial checklist only. Does not scan a contract, address or URL; no wallet connection. 2026-09-29
More research tools None. This is a link. Opens /tools; no computed result. On-site tools index; no external data provider. Navigation only. Gas, wallet, bridge and DeFi workflows are described as future and are not implemented in this build. 2026-09-29

Last updated 2026-09-29 is the review date recorded in comparisons.json; the tools themselves have no separate timestamp, so no newer date is claimed. The descriptions above match the code as it runs and deliberately omit capabilities it does not have.

DeFi protocol risk checklist

Review the main risk signals before connecting a wallet or approving a transaction.

Market context

Review the latest timestamped CoinGecko, DefiLlama and Ethereum RPC snapshot.