What we ask your wallet to sign
Nothing happens on page load: this site never requests wallet access, signatures or transactions unless you click a button that says so. The full list:
| Request | When | What it does |
|---|---|---|
| Connect wallet | Only when you click “Connect wallet”. | Reads your address. No signature, no transaction. |
| Approve exact amount | Only when you click “Pay and scan”. | An ERC-20 approve for EXACTLY one scan price of the utility token to the ScanPayments contract on Robinhood Chain. Never an unlimited approval. |
| Permit signature (EIP-2612) | Only if the token supports it and you choose it. | An off-chain signature allowing exactly one scan price. Replaces the approve transaction. |
| Request scan | Right after the approval. | Calls requestScan(chain, address) on ScanPayments. Half the payment is burned, half goes to the treasury. |
| Sign in (holders) | Only when you use a free holder scan in voucher mode. | A plain-text sign-in message (EIP-4361) that proves you own the wallet. No gas, no approval, no token transfer. |
| Admin sign-in | Only the contract owner, only in the Control Panel. | A sign-in message bound to the exact settings being saved. |
You always pay on Robinhood Chain (chain id 4663), even when the scanned token lives on Ethereum, Base, Arbitrum One, Solana. If a wallet ever shows you anything else — another network, an unlimited approval, a transfer of your tokens — reject it and tell us.
Payment contract: 0x9F20472903486F732C9861E516c1C238Fd2e56B3. Animated wallet windows on the home page are labelled DEMO and are pictures, not wallet prompts.
Report a security issue
Please report vulnerabilities privately by direct message to @bytejury on X. Include steps to reproduce; do not test against other users’ funds. Machine-readable contact: /.well-known/security.txt.