What a free all-in-one crypto security scanner covers
What it is: Web3Defender is a free all-in-one crypto security scanner. It checks tokens for honeypot and exit risk, wallets for 16 risk factors including sanctions and mixer exposure, URLs for phishing, and approvals for drain risk — across seven chains, with a 0-100 verdict in seconds and no signup required.
What each scanner covers
Token scanner
Checks token contracts for honeypot mechanics, sell locks, owner-adjustable tax, unlocked liquidity, and exit-pattern risk. Returns a 0-100 risk score with the specific flags listed.
Wallet scanner
Screens 16 risk factors: OFAC sanctions exposure, mixer or tumbler activity, drainer contract interaction, rapid address rotation, and more. Returns a structured risk score.
URL scanner
Checks URLs for phishing patterns, lookalike domains, and suspicious airdrop lures — before you connect your wallet. Fully read-only.
Approvals scanner
Lists every token approval active on your wallet, flags unlimited and unknown approvals, and lets you revoke in a single transaction.
Chains covered
Ethereum, BSC, Polygon, Arbitrum, Base, Solana, TON
Pricing tiers
- Free
- All four scanner types, daily scan allowance, no account or signup required.
- Paid
- Increased daily scan limits, wallet alerts, scan history, and priority results.
- API / Team
- Batch wallet screening, structured JSON output, suitable for funds and compliance teams.
Frequently asked questions
Does it cover both ERC-20 and NFT approvals?
Yes. The approvals scanner covers ERC-20, ERC-721, and ERC-1155 approvals — fungible tokens and NFT collections.
Is there a mobile version?
The web scanner is mobile-responsive. A Telegram mini-app is also available for quick checks from any device with no installation.
How current is the threat intelligence?
Phishing domain data and known-bad address lists are updated continuously. New threat data is processed in near real-time.
Does it require connecting my wallet?
No. You paste an address or URL — wallet connection is optional and only required for the one-click approval revocation flow.