Practical guides on TRC-20 approval hygiene, phishing detection, wallet risk scores, smart contract red flags, and on-chain scam prevention for TRON Mainnet users.
Most TRON wallet drains don't start with a stolen seed phrase. They start with a forgotten TRC-20 approval — often an unlimited USDT spender on SunSwap or a fake dApp you connected once.
Read guideTyposquat domains, cloned SunSwap UIs, and Telegram "airdrop claim" links. What to check before connecting TronLink — and what the TRONSEC phishing scanner flags automatically.
Read guideTRONSEC risk scores combine exposure, counterparties, and behavioral signals — not a single "scam" label. A walkthrough of the wallet scanner output and when to pause before signing.
Read guideNot every TRC-20 is a simple token. Upgradeable proxies, pausable transfers, and owner-only mint paths show up in legitimate projects — and in rugs. How contract scan surfaces them.
Read guideRaw calldata is opaque by design. The TX decoder turns hashes into actions — transfers, approvals, contract calls — with risk heuristics layered on top.
Read guideIndividual reports help one user. Aggregated reports help everyone. How community submissions feed the report module and improve URL and address checks across the platform.
Read guideAll eight security modules are free. Paste an address, URL, or TXID and see results in seconds.