- Home
- Skills
- Web3 & Crypto
- crypto wallet safety check
Works with the AI Agents you already use
crypto wallet safety check
Pre-flight crypto security agent that detects EIP-7702 traps, honeypots, and malicious token approvals.
$7.99
crypto wallet safety check
Example session with this skill installed
Check if this address is safe to send 1.5 ETH to: 0x742d35Cc6634C0532925a3b844Bc454e4438f44e. I suspect it might be a delegated wallet.
- Read your context and instructions
- Compiled the crypto wallet safety
I have completed the safety check for the requested address. The analysis included bytecode inspection, transaction count verification, and delegation checks.
Wallet Safety Report
| Field | Value |
|---|---|
| TARGET | 0x742d35Cc6634C0532925a3b844Bc454e4438f44e |
| VERDICT | DANGER |
| FINDINGS | CRITICAL: EIP-7702 delegation detected. The address contains an active delegate pointer to a known sweeping contract. |
| EVIDENCE | eth_getCode: 0xef0100... prefix found. eth_getTransactionCount: 0. |
| ACTION | DO NOT SEND FUNDS. Any ETH sent to this address will be automatically forwarded to the delegate contract. |
Technical Breakdown
Delegation: The eth_getCode call returned the 0xef0100 prefix, confirming this is not a standard EOA but a delegated account. The delegate address is 0x123...456.
Account Age: The nonce is 0, indicating this account has never initiated a transaction. This is a common pattern for "fresh" trap wallets used in phishing.
Risk Type: This is a high-severity drainer trap. The attacker likely provided this address under the guise of a "safe" recipient or airdrop claim address.
Next steps
- Block the requester or platform that provided this address.
- Do not attempt a "test transaction" as it will be lost immediately.
- Report the delegate address
0x123...456to security providers like MetaMask or Chainabuse.
Connects securely to your tools. The creator never sees your data.
About this skill
Verify the safety of EVM or Solana wallets, tokens, and contracts before committing funds. This tool detects sophisticated attack vectors that standard block explorers often overlook, such as EIP-7702 delegation traps and permit phishing. It provides a structured pre-flight check to determine if an address is a legitimate destination or a drainer trap.
What it does
- Detects EIP-7702 delegations by identifying the
0xef0100prefix in contract code to spot hidden auto-forwarding traps. - Audits token approvals by checking for unlimited
2^256-1allowances to unrecognized spender contracts. - Identifies fresh wallet risks using transaction counts and contract creation blocks to flag low-reputation accounts.
- Screens for honeypot tokens by verifying transfer taxes, blacklist functions, and actual pool liquidity.
- Evaluates signature phishing by analyzing EIP-712 permit history and potential off-chain authorization risks.
How it works
- Initial Inspection: Input a wallet or contract address to trigger a code and nonce check via public RPCs.
- Risk Analysis: The tool scans for delegation prefixes, high allowances, and contract deployment age.
- Behavior Verification: It cross-checks incoming ETH behavior and token pool status across multiple endpoints.
- Safety Reporting: Outputs a standardized verdict (SAFE/CAUTION/DANGER) with ranked findings and raw evidence.
Frameworks & tools
This skill utilizes Ethereum, Base, BSC, and Solana public RPC endpoints. It performs direct reads for eth_getCode, eth_getTransactionCount, and allowance data.
Why this beats prompting it yourself
Standard LLM prompts lack the specific forensics needed to catch EIP-7702 hijacks or distinguish between a normal wallet and a delegated drainer. This skill enforces a strict verification procedure that requires raw bytecode and nonce checks before reaching a verdict.
Use cases
- Transaction pre-flight to ensure a destination address is not a sweeping contract.
- Airdrop validation to check if a token is a sellable asset or a honeypot trap.
- Wallet audits to identify and revoke dangerous unlimited token approvals.
- Security triage for users who suspect they may have signed a malicious permit.
Known limitations
Requires public RPC access to the relevant chain. It cannot detect private mempool bots or zero-day logic vulnerabilities that do not manifest in code, nonces, or allowances.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
Money-back guarantee
Doesn't do what its page promises? You get your money back.
Trust & safety
Security scanned
Verified clean 4 days ago
- Passed all security checks, Safe to install