Unknown spender checker
Find TRC20 spenders on a TRON address that TronScan does not label as a known project — the pattern used in unlimited-approval drains.
A spender is the contract allowed to pull
The spender is the second argument of approve(spender, amount). It is usually a router, a market, or a malicious contract. Your wallet is the owner. The token contract stores the pair.
This check is for rows without a trusted project name. Unlabeled plus unlimited plus USDT is the pause condition.
How TronScan names versus how hex looks
The approve/list payload may include a project title. Empty title is not proof of malice — new venues are unlabeled first — but it is a reason to verify the contract on an explorer before you keep the allowance.
Security/auth/data may add a risk tag. Use both: no name, plus risk, plus unlimited, is worse than no name alone.
Wrong spender is usually a rushed signature
Phishing DApps present a familiar logo and an approve for a different contract. Once signed, the unknown spender is on-chain until you revoke. This table is how you notice.
We do not blacklist the hex for you. We show it. Revoke in your wallet.
Named DEX rows do not belong in the panic pile
SunSwap and JustLend labeled rows are a different check. Do not treat every unlimited as unknown. Read the name column.
Sample named row: TRX6Q82wMqWNbCCiLqejbZe43wk1h1zJHm / TUSD / SunSwap.
Listing only, independent desk
No seed. Deep scan read-only ~2–3 TRX. Not TRON Foundation, Tether, SunSwap, TronLink. @wholetron with the spender hex if you want a second pair of eyes — still no seed.
Independent desk: lists only, never a seed phrase, help at @wholetron with public addresses only.
FAQ
What is a spender?
The contract you approved to call transferFrom on a TRC20 token.
Is unlabeled always a drainer?
No, but unlabeled + unlimited USDT deserves a stop-and-verify.
Can you name the contract for me?
We show TronScan’s label when it exists. We do not invent names.
How do I remove an unknown spender?
Sign approve(0) for that token and spender in your wallet.
Risk tag source?
TronScan /api/security/auth/data.
Help?
@wholetron — spender contract, not a seed.