Drainer Detection - Known Wallet Drainer & Phishing Scanner

TokenForge now includes wallet drainer detection. Using our ScamDB, it automatically detects tokens and addresses associated with known wallet drainers and phishing sites. This feature was born from the TokenForge developer's own firsthand experience as a drainer victim.

The Origin Story

On February 9, 2026, the TokenForge developer fell victim to a wallet drainer in the Orynth community Discord. A fake airdrop link (solland.cc) was posted from an account with an admin badge. After connecting a Phantom wallet and signing a transaction, SOL was immediately drained to address 7kMpie...j1eL26.

While the loss was 0.093 SOL (~$7.95), the same drainer had stolen $3,700+ in total, laundering funds through Jupiter Swap and FixedFloat Exchange. This experience became the founding motivation for TokenForge.

What is ScamDB?

TokenForge's ScamDB is a database of verified scam information. It integrates with the RugCheck.xyz API to automatically cross-reference known dangerous tokens and scam projects. The developer's own incident (SCAM-001) is registered as the first entry.

Detection Targets

• C2: KNOWN_SCAM_TOKEN - Tokens flagged as "danger" in RugCheck DB (CRITICAL -30 points)
• Phishing site associations - Detect connections to known drainer addresses
• Fake airdrop patterns - Tokens associated with FCFS and Claim-type phishing schemes

Common Phishing Patterns

• Fake airdrops - "Claim" buttons that request wallet connection, then drain SOL upon signing
• Admin impersonation - Compromised Discord accounts with admin badges posting fake links
• Redirect techniques - Legitimate-looking domains that redirect to drainer sites
• System Program Transfer - Disguising drain transactions as simple transfers to trick approval

How to Protect Yourself

• Always scan tokens with TokenForge before purchasing
• Never click "Claim" links from airdrop announcements outside official channels
• Verify link safety even when posted by accounts with admin badges
• Always review transaction details before signing
• Build a habit of fact-checking with tools rather than relying on authority

Risk Classification

Tokens registered in ScamDB are classified as CRITICAL risk. A 30-point deduction is applied to the risk score, and an immediate warning is displayed. This detection uses the RugCheck API and is available on the free plan without any API keys.