Chain coverage · chain id 1
Ethereum token risk scanner
Ethereum mainnet is where the ERC-20 standard and most of the tooling around it were written, so contract data here is the richest of the five chains ScanZX covers: verified source is common, proxy patterns are well understood, and security providers have the deepest coverage. That richness cuts both ways — a well-funded scam on Ethereum tends to look more legitimate than one on a cheap chain, because the deployer could afford to make it look legitimate.
ScanZX activity on Ethereum
Fewer than 25 completed Ethereum scans have been recorded on this instance, so no percentage is published. A figure drawn from a handful of scans would not be a statistic, and ScanZX does not print one it cannot support.
What runs on Ethereum, and what does not
Read live from this deployment’s configuration when the page was generated. A row says available only when a scan on Ethereum would actually perform that check — nothing here is a fixed badge.
Explorer data for this chain comes from Etherscan (etherscan.io). Market data comes from DexScreener's indexed Ethereum pairs, which covers Uniswap V2 and V3, Curve, Balancer and Sushiswap among others. Sell simulation runs against the canonical Uniswap V2 router as a read-only eth_call — ScanZX never builds or signs a transaction.
Why Ethereum produces the risks it does
Deploying and rugging on Ethereum costs real money in gas, so the chain sees fewer disposable tokens than Base or BNB Smart Chain and more patient, higher-value setups. Expect fewer scams by count and larger ones by value. Gas cost also means an attacker is less likely to churn through wallets, which makes deployer history a more informative signal here than on chains where a fresh deployer costs a fraction of a cent.
Patterns that recur on Ethereum
Upgradeable proxies used as a delayed switch
Ethereum has the most mature proxy tooling, and legitimate projects use it heavily — which is exactly why it hides well here. A proxy is not a warning sign on its own, but an upgradeable implementation controlled by a single externally-owned account means today's audited logic is not a commitment about tomorrow's. ScanZX reports upgradeability, who can trigger it, and whether that address is an EOA, a multisig or a timelock.
Liquidity locks that expire sooner than the marketing implies
A lock is a date, not a guarantee. On Ethereum the lock is usually real and verifiable, so the risk shifts from 'is it locked' to 'for how long, and what share of the pool'. A ninety-percent lock expiring in nine days is a different position from the same lock expiring in two years, and the two are frequently described with the same word.
Concentration hidden behind many wallets
Because Ethereum addresses are cheap even when gas is not, supply is often split across wallets funded from one source within a short window. Top-holder percentage alone under-reports this. ScanZX reports both the top holder and the top ten, and flags clustering when funding patterns support it — while stating plainly that wallet clustering is heuristic and can be wrong.
These describe observed patterns, not any named project. A pattern appearing in a report is a reason to verify further — it is never proof of intent, and its absence is never clearance.
What to check first on Ethereum
- Whether source code is verified on Etherscan, and whether the verified contract is the proxy or the implementation.
- Who holds owner privileges, and whether that address is a single key, a multisig or a timelock.
- Pool depth relative to market capitalisation — thin liquidity behind a large notional value is the setup for severe exit slippage.
- Lock expiry date and locked share, not merely whether the word 'locked' appears anywhere.
Each of these is scored as a separate factor with its own source and severity. The methodology page sets out the weights, the confidence model and how unavailable checks are handled.
Ethereum scanning questions
Does ScanZX support Ethereum?
Yes. Ethereum is one of the five chains that receive the deep EVM scan: on-chain contract reads, market data, a security-provider cross-check, sell-path simulation and deployer history. The table above shows which of those are configured on this deployment right now.
Can a scan prove a Ethereum token is safe?
No. ScanZX reports observed risk signals and the checks it could not run, alongside a confidence score. A low risk score with low confidence means little data was available — it is not clearance, and no result should be read as a recommendation to buy or sell.
Do I need to connect a wallet to scan a Ethereum token?
No. ScanZX never connects a wallet and never asks for a private key or a signature. Sell-path simulation is a read-only call against a router; no transaction is built, signed or sent.
What does ScanZX do when a check cannot run on Ethereum?
It reports the check as unavailable and lowers the report's confidence score. Missing data never makes a token look safer — that is the single rule the whole scoring model is built around.
Other chains and checks
ScanZX runs the deep EVM scan on five chains. Compare coverage:
Or start from the check you care about:
Cryptoassets are high risk and you could lose all money used to buy them. ScanZX reports observed warning signs and data gaps at scan time on Ethereum. It never guarantees that a token is safe, it is not financial advice, and it is not a recommendation to buy or sell anything. Always carry out your own further verification.