Report 001 · Fake airdrop claim
Fake Base Airdrop Claim Page
A fake claim page asks users to connect their wallet and approve unlimited token spending to claim a “guaranteed” reward.
HIGH RISK · 95/100
Chain: Base / Ethereum L2
Category: Wallet-drainer pattern
Target: Website + wallet task
Red flags- Shortlink or unofficial-looking domain.
- Guaranteed reward with unclear eligibility.
- Requires wallet connection before useful information.
- Asks for approve, permit, or unlimited spending.
- Urgency like “claim now” or “last chance”.
Safer actions- Verify the link from official website and X/Twitter.
- Never approve unlimited token spending for claim pages.
- Use a fresh burner wallet for unknown campaigns.
- Check and revoke token approvals after testing.
- Close immediately if asked for seed phrase/private key.
AYSHATA SIGNAL: HIGH RISK · resembles common wallet-drainer claim flow.
Report 002 · Testnet campaign
Suspicious Testnet Campaign Asking for Deposit
A campaign claims users can qualify for future rewards, but asks them to bridge or deposit real funds before basic project details are clear.
MEDIUM-HIGH · 78/100
Chain: Ethereum L2 / Multi-chain
Category: Upfront deposit risk
Target: Campaign task
Red flags- Deposit, bridge, or paid mainnet action required.
- Vague reward terms like “big allocation”.
- Missing, thin, or copied documentation.
- New X/Twitter account with weak engagement.
- Moderators pressure users to act quickly.
Safer actions- Treat paid campaign tasks with high caution.
- Only use funds you can afford to lose.
- Check if official ecosystem accounts mention it.
- Wait for clearer docs, audits, or community review.
- Avoid sending funds to unknown addresses.
AYSHATA SIGNAL: MEDIUM-HIGH RISK · deposit requirement + vague reward claims need caution.
Report 003 · dApp checklist
Legit-Looking dApp With Minor Safety Gaps
A new dApp has HTTPS, active social channels, and readable docs, but still has limited external reviews and requires wallet connection for testing.
LOW-MEDIUM · 38/100
Chain: Base / Ethereum L2
Category: dApp safety checklist
Target: Website + social links
Positive signals- Website uses HTTPS.
- Official X/Twitter and docs are linked from same domain.
- No seed phrase or private key request.
- No obvious guaranteed reward claim.
- No upfront deposit in the basic task flow.
Remaining caution- Project is new with limited public track record.
- Contracts may be unaudited or undocumented.
- Wallet connection is still required.
- Use a burner wallet and read prompts carefully.
- Revoke approvals after testing if permissions were granted.
AYSHATA SIGNAL: LOW-MEDIUM RISK · no critical surface red flag, but caution still recommended.