New Free Tx Analysis Tool
So I saw this forum post the other day ( Identify scams (phishing, etc.) - #3 by tacolopo ) of a user (@UGatCosmos) asking for a way to identify malicious content in transactions. I remarked that I could do this with funding, but then I decided I might as well make a basic tool for newbies. So I built this website https://www.cosmos-tx-safety.com/ that you can use to give out to newbies or maybe people who aren’t english speakers and it will do some english-based analysis for scammy memo content and output a risk score. Here’s a YouTube walkthrough: https://www.youtube.com/watch?v=tId-pF-CuZU.
Bottom line is its free, rudimentary, simple, and not authoritative. I could make this way better with funding, but this should suffice for basic inquiries since any project getting funding is unlikely. Hopefully this provides some use.
Hi, thanks for this.
I wanted to give it a try, but I get a “404: transaction not found”.
The hash is: D4098966535D463BEC658D5697F4C545528BAA5793AFF725A52B9CC650729E32. Can you please check?
Also, do you have a documentation on what is considered a malicious transaction? Or some source code I could look at?
Thank you!
Hi, yes you get a 404 not found because that tx is from January. I’m using public LCDs that prune txs. Mintscan has a different architecture. I do not have documentation besides what I commented on in the video/these posts. I do not have the repo set to public.
As I said, I made this in one day and its free. All your comments here are valid, but I’m not going to spend time making products good without $. Hopefully that makes sense.
My free little MVP is only good for a recent tx.
ok sure, no problem, was just curious.
Just a quick note: I would expect it to be more valuable if this was something where you could copy/paste the message that you’re about to sign from the wallet, so it can be analyzed before you sign the transaction.
Indeed, if you already signed a malicious transaction, it’s probably too late.
Anyway, good luck and have a nice day!
Yeah definitely. I think even more valuable is if the wallet simply shows the risk score ahead of time or if you click a button directly in the wallet. I’ve designed it to work this way as you can see if you monitor the network connections when making a query - it’s just an API call, so the wallet could simply reach out to my API.
Yeah, it could help, if your scoring system is accurate enough.
It would not prevent users giving out their seed phrase (which I understand is still the most common reason for users being scammed), but it’s a good path forward. Suggest you contact Keplr and Leap to see if they would be interested.
My friend, I have long since given up trying to get money in Cosmos. There’s no money to be had here. I know keplr already checks memos to ensure no seed leakage.