token-security

JWTLens - Burp Suite extension for automated JWT security testing. 62 checks: passive scanning, algorithm confusion, signature bypass, KID injection, weak secret brute force, and a built-in JWT Forge tab. Works automatically as you browse.

A deep technical article exploring how AI, feature engineering, and static smart-contract analysis uncover rugpull risks before humans detect them. Covers Solidity pattern mining, mint abuse detection, blacklist/fee manipulation signals, ML-inspired scoring models, and how to quantify ERC-20 token scam probability.

A research-grade framework for extracting, classifying, and analyzing the “genetic” behavior of smart contract tokens. Identifies economic traits, supply mutations, fee patterns, permission risks, upgradeability vectors, and scam species using a structured gene taxonomy with risk scoring, HTML reports, and token comparison tools.

Multi-chain ERC20 token security scanner for honeypot risk, taxes, liquidity, ownership, holder concentration, and 0-100 risk scoring.

AI execution firewall for OKX X Layer. Scans both tokens for rug risk, fetches optimal DEX routes, builds unsigned transactions. Server never broadcasts. Built for Build X-Agent Hackathon.

Advanced token security, leak prevention and rotation automation for Node.js applications

Auditor de segurança de tokens JWT/JWS — alg:none, confusão de algoritmo (RS→HS), brute de segredo HMAC, kid/jku SSRF e validação de claims. Inclui referência de validação correta. Python · MIT.

A browser-based JWT security toolkit that decodes, audits, brute-forces weak secrets, forges tampered tokens, and simulates real-world attacks — with instant Python/PyJWT fix code generation.

A .NET CLI tool that performs static analysis on C# source code to detect insecure or misconfigured JWT authentication patterns.

a git credential helper secured via gpg encryption and your sudo passwd

EVM token security analysis API with risk scoring via x402 micropayments. Pay $0.005 USDC per request on Base. No API key required.

AI-powered blockchain security platform that analyzes tokens and smart contracts to detect rug-pull risks, malicious behavior, and security threats before you invest.

JWTScout is an offensive security CLI tool designed to analyze, audit, and exploit JSON Web Token (JWT) vulnerabilities including alg:none, weak secrets, key confusion, and claim manipulation.

VampSecure Labs JWT Security Auditor — token decoder, alg=none, RS256→HS256, HMAC brute force

Professional JWT security testing toolkit. Analyze, crack, forge, and exploit JSON Web Tokens with 15+ vulnerability checks, 100k secret wordlist, and CVE-specific attacks (CVE-2022-21449, CVE-2018-0114).

AI agent that scores Solana & Base token safety (0-100) from free on-chain data, offered as a-la-carte services on Croo Network, with a FastAPI dashboard.

Official TypeScript SDK for the RektRadar API — Ethereum scam, rug-pull & honeypot detection (token risk scores, mempool imminent-rug stream, signed webhooks).

Free token security API — honeypot check, contract permissions, liquidity, holders and project on Ethereum, BNB Chain, Solana and Tron. Up to 21 points, every one naming its source. No account, no API key. SVG badge, iframe embed and a Telegram bot in 18 languages.

Deterministic, source-linked token contract risk briefs for AI agents, with explicit confidence, coverage, and evidence gaps.

Pre-trade honeypot / rug-pull gate for trading bots. Gate every buy in 3 lines across 8 chains. Pay-per-check in USDC via x402. npm: honeypot-guard