NZOChain is entirely read-only with respect to funds. It never holds private keys. Revokes and other on-chain actions are signed by you in your wallet. Scan coverage is four EVM chains — see Networks. Solana is not supported.
The detection pipeline
When NZOChain receives a wallet address — from a new connection, an on-demand scan, or a scheduled monitor tick — the same four-stage pipeline runs.1
Connect: ingest wallet data
NZOChain fetches the on-chain record for your wallet address: approvals, contract interactions and balances on the four supported EVM networks.No off-chain data, private keys, or browser state is accessed. Everything NZOChain reads is publicly available on the blockchain.
2
Analyze: run threat detection checks
The ingested data passes through NZOChain’s rules engine and multi-source signals (including GoPlus, public denylists, and proprietary triage). Four categories run in parallel:Token approval analysis — Each active approval is evaluated for the approved amount (flagging unlimited/infinite approvals), the age of the approval, whether the approved contract has been flagged as malicious, and whether the approval is still necessary given your recent activity.Smart contract bytecode analysis — NZOChain inspects contracts your wallet has interacted with for known patterns: honeypot logic, hidden transfer functions, self-destruct conditions, and ownership back doors. Contracts that haven’t been verified or audited are flagged for additional scrutiny.Phishing signature matching — Connection history and incoming transaction sources are cross-referenced against denylists and known phishing / drainer addresses from multiple sources.Wallet connection pattern analysis — Unusual connection events — such as connecting to an unknown dApp, or to a site that spoofs a known protocol — are flagged with heuristic pattern matching.
3
Score: calculate your RiskScore™
Each threat signal carries a weighted severity value. NZOChain’s scoring model aggregates these signals — accounting for signal type, recency, active vs. historical exposure, and cross-chain risk — into a single RiskScore™ between 0 and 100.The model is a deterministic rules / heuristics engine enriched with multi-source intel — not AI-powered or fully proprietary ML. A wallet with one low-severity warning from six months ago scores differently from one with three active infinite approvals to unverified contracts.
4
Act: surface findings and enable remediation
Your RiskScore and the full breakdown of findings appear in your dashboard after the pipeline completes. For each flagged item, NZOChain shows you the risk type, severity, affected contract or address, and a recommended action.Where remediation is possible — revoking an approval, for example — NZOChain provides an action that constructs the necessary transaction and sends it to your wallet for your confirmation. You remain in control of every on-chain action.