Verify before
you sign.
Most wallet drains start with a link that says "claim". Check the link, decode the signature and scan the contract, in under a minute, before you connect anything.
Links go to the link checker, addresses to the scanner.
Contract scanner
Honeypot, taxes, mint and freeze authority, LP, insiders and deployer history, each with its source.
Open →02Claim link checker
Lookalike, punycode and structure analysis of any link, offline in your browser.
Open →03Signature decoder
See the function, spender and amount behind any approve, permit or setApprovalForAll.
Open →04Claim checklist
Sixteen checks in the order you meet them, from the first link to the last revoke.
Open →The four-step routine
- SourceWhere did the link come from? Official channels only.
- LinkExact domain, no punycode, no lookalike.
- SignatureKnown function, known spender, limited amount.
- TokenSellable, no mint or freeze, LP locked.
Field guides
All guides →Fake claim sites: how airdrop phishing actually works
A walk through a typical fake "claim your airdrop" page, from the link you are sent to the transaction that empties your wallet, and the checks that stop it.
02Honeypot tokens: you can buy, but you cannot sell
How honeypots, sell taxes, blacklists and adjustable slippage trap buyers, and which contract checks reveal them before you buy.
03Unlimited approvals and permit signatures: the drainer toolkit
What approve, setApprovalForAll and permit really grant, why "unlimited" matters, and how to read a request before you sign.
FAQ
Is trojan.claims part of the Trojan trading bot?
No. trojan.claims is an independent safety resource. We are not affiliated with any trading bot or airdrop. We do not run claims, and we will never ask you to connect a wallet.
Can I claim tokens on this site?
No. There is nothing to claim here. If someone sent you to this domain to claim tokens, that message was not from us.
Where does the scanner data come from?
Security values come from on-chain reads and public providers such as GoPlus, RugCheck, DEXTools and GMGN, served through this site. The scanner shows the provider next to each check.
Does the link checker visit the URL?
No. It analyses the text of the link in your browser: domain, characters, top-level domain, structure and lookalikes. The link is never opened or sent anywhere.
Is anything I paste stored?
Links and calldata stay in your browser. Checklist progress is saved in local storage on your device only.
Checked and clean?
Trade it on GMGN: charts, holders and security on one screen, across Solana, BNB Chain, Base and Ethereum.
Open GMGNSupply concentration before you claim
31% of the called tokens had more than half of the supply in the top 10 holder addresses.
- Top 10 hold over 50%
- 31%
- LP 99%+ locked
- 99%
- Under 100 holders
- 29%
- Under $10K liquidity
- 38%
trojan.claims reads these figures from the Empire call feed snapshot of 27 Oct 2026, 23:20 UTC. Window: 22–27 Oct 2026. Market fields: latest reading per token.
Blackhat Telegram network
Four chains. Six alert channels per chain: Singlebuys, Multibuys, General, Hype, Callers and Xtrack. 2 verified chain folders; 2 pending.
Chain folders
- Solana folder · MAIN + 6 channels · MAIN group
- BSC folder · MAIN + 6 channels · MAIN group
- Base MAIN group · folder link pending
- Robinhood MAIN group · folder link pending
All 24 current alert channels and MAIN groups