Check a risky wallet before adding gas.

This module summarizes token and NFT assets exposed by active approval rows already found by the read-only scanner. It does not fetch balances, crawl wallets, move assets, or claim to show every asset in the wallet.

This diagnostic checks recent normal native-token transfers for gas deposits followed quickly by outgoing native transfers. It does not confirm an attacker and does not rule out sweepers that use private relays, token transfers, internal calls, or unindexed activity.

This diagnostic compares the latest and pending nonce reported by the selected network RPC. A pending nonce gap can mean the wallet already has one or more transactions waiting, but this check cannot see every private, dropped, replaced, or unindexed transaction.

This diagnostic builds a bounded timeline from recent public explorer data, looking for approval-like calls followed by outbound native or token movement. It can show visible ordering, but it does not prove causation or identify an attacker.

This diagnostic compares recent inbound counterparties against outbound addresses from the bounded history window. Similar prefix and suffix matches can be address-poisoning context, but they are not proof of attacker control or intent.

This diagnostic checks approval spenders for public contract context such as bytecode presence, verified-source availability, proxy-like metadata, and reviewed registry matches. Unknown or unverified spenders are review signals, not proof of malicious activity.

This diagnostic surfaces active Permit2 delegated allowances already live-read by the existing approval scanner. It does not request signatures, sign messages, submit transactions, or claim that missing rows prove the wallet is safe.

This local registry can flag addresses only when Pulse Revoke has reviewed public source evidence. Unknown does not mean safe, and matches are context rather than proof of control, intent, or recoverability.

This diagnostic reads latest account code on supported networks and checks for the EIP-7702 delegation designator. It does not request signatures, clear delegation, repair accounts, or claim that no delegation means no compromise.

This diagnostic reads latest account code and Safe-compatible owner, threshold, module, and nonce view methods where available. It does not change owners, disable modules, submit Safe transactions, use relayers, or claim that missing warnings prove the wallet is safe.

This diagnostic checks a bounded recent window of EntryPoint UserOperationEvent logs for the scanned address. It does not contact bundlers, request UserOperation signatures, use paymasters, submit transactions, or clear session keys.

This diagnostic checks a bounded recent RPC log window for ERC-6909 Approval and OperatorSet events by the scanned address. It does not prepare generic multi-token revokes, submit transactions, or prove full current allowance state.

This diagnostic reads visible open HEX stake rows on PulseChain, classifies active, mature, late, and Good Accounting candidate context, and does not run or prepare End Stake, Emergency End Stake, or Good Accounting.

This assist layer explains when a visible late HEX stake may be relevant for manual Good Accounting review from a clean wallet. It does not prepare, sign, submit, relay, or simulate a Good Accounting transaction.

This diagnostic reviews bounded inbound token and NFT transfer history for dust or bait signals. It strips URL-like metadata, never fetches arbitrary token-provided websites, and treats suspicious metadata as context rather than proof that an asset is malicious.

Limits

What this scan can and cannot detect

Report completeness

Current diagnostic coverage

Token approvals

Not scanned

NFT approvals

Not scanned

Gas-sweeper pattern

Not scanned

Pending nonce

Not scanned

Approval-to-drain timeline

Not scanned

Address poisoning signals

Not scanned

Spender contract risk

Not scanned

Permit2 exposure

Not scanned

Visible assets at risk

Not scanned

Known-risk registry

Not scanned

HEX stake status

Not scanned

Good Accounting Assist

Not scanned

EIP-7702 delegation

Not scanned

Smart wallet / Safe

Not scanned

ERC-4337 / session keys

Not scanned

ERC-6909 approvals

Not scanned

Token/NFT dust traps

Not scanned

Export incident report

Save the read-only snapshot.

Export this report before taking action. It can help you review visible risks, approvals, stakes, and possible next steps without connecting the compromised wallet.