Crypto Security Center

Token and contract risk scanner

Before you approve a token or buy into one, check what its contract allows its owner to do. Most of what goes wrong later is visible in the code today.

Cyber Security Space will never ask for your private key or recovery phrase. Only enter a public wallet address. Public addresses are read only — nothing here can move funds or sign a transaction.

This reads public contract data only. It is not a substitute for a security audit, and nothing here is investment advice.

The patterns we look for

  • Unverified source code. Nobody can review what the contract does, including you.
  • Owner-privileged functions. Minting, pausing, blacklisting or adjustable fees mean the rules can change after you buy.
  • Upgradeable logic. A proxy pattern means the code running tomorrow need not be the code you reviewed today.
  • Very recent deployment. Most short-lived scam tokens live and die inside their first month.

Continue

Related security checks

Wallet scanner

Live

Check a wallet for risky approvals and contract exposure

A risk score, the findings behind it, and a prioritised list of what to fix first.

Open tool

Approval checker

Live

See every contract allowed to spend your tokens

A table of active approvals, ranked by how much they expose the wallet.

Open tool

Transaction explainer

Live

Understand what a transaction actually did

A readable explanation of the transaction and the permissions it created.

Open tool

Questions

Frequently asked

Can this tell me whether a token is a scam?
No tool can tell you that with certainty, and any tool that claims to is lying. What this does is detect the code-level patterns that scam tokens rely on — unverified source, owner-only functions that can block transfers or mint supply, upgradeable logic, and a contract deployed very recently.
What is a honeypot token?
A token you can buy but cannot sell, usually because the contract contains logic that blocks transfers from anyone except privileged addresses. Verified source code is what makes that logic visible before you commit funds.
Why does unverified source matter so much?
Without verified source, nobody outside the deployer can read what the contract does. Legitimate projects verify their contracts as a matter of course, because their users ask them to.
Does a verified contract mean the token is safe?
No. Verification only means the code is readable. A verified contract can still contain owner privileges that let the deployer change the rules after people buy.

Important

Cyber Security Space provides automated security analysis based on available blockchain and threat intelligence data. Results may be incomplete or inaccurate and should not be treated as a guarantee of safety, financial advice, or investment advice. This score reflects the security signals currently detected. A low-risk score does not guarantee that a wallet or transaction is safe. Contract analysis is automated pattern detection, not a security audit.

Nothing on this page is financial or investment advice.