Overview
Check an EIP-712 signature request BEFORE signing (the JSON passed to eth_signTypedData_v4): detects ERC-2612 Permit, DAI permit, Uniswap Permit2 (allowance + transfer) and Seaport orders, explains in one line what the signature grants, and flags drainer patterns: unlimited allowances, spender that is a plain wallet (EOA, checked on Base), zero-payment NFT listings, bulk listings, never-expiring grants. Returns risk (low/medium/high), grants, warnings and the EIP-712 digest.
Protocol
x402 (POST)
Price
$0.01
Payment Asset
USD Coin
Payment Network
eip155:8453
Category
crypto/nft
Provider
nightshift-x402
Indexed
2026-11-06 11:08:12
Health
Status
unknown
Latency (p50)
—
Uptime (30d)
—
Reliability Score
—
Last Checked
Never
Last Healthy
Never
Consecutive Failures
0
Input Schema
{
"body": {
"domain": {
"chainId": 8453,
"name": "USD Coin",
"verifyingContract": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"version": "2"
},
"message": {
"deadline": "1893456000",
"nonce": "0",
"owner": "0x1111111111111111111111111111111111111111",
"spender": "0x2222222222222222222222222222222222222222",
"value": "115792089237316195423570985008687907853269984665640564039457584007913129639935"
},
"primaryType": "Permit",
"types": {
"Permit": [
{
"name": "owner",
"type": "address"
},
{
"name": "spender",
"type": "address"
},
{
"name": "value",
"type": "uint256"
},
{
"name": "nonce",
"type": "uint256"
},
{
"name": "deadline",
"type": "uint256"
}
]
}
},
"bodyType": "json",
"method": "POST",
"type": "http"
}
Output Schema
{
"example": {
"advice": "Do NOT sign unless you fully trust the spender/site and intend this exact grant.",
"digest": "0x…",
"grants": [
{
"amountFormatted": "unlimited",
"spender": "0x2222222222222222222222222222222222222222",
"spenderIsContract": false,
"symbol": "USDC",
"token": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913",
"unlimited": true
}
],
"kind": "erc2612_permit",
"primaryType": "Permit",
"risk": "high",
"summary": "Lets 0x2222…2222 spend unlimited USDC",
"warnings": [
"UNLIMITED_ALLOWANCE: … could move ALL your USDC",
"SPENDER_IS_EOA: … is a plain wallet, not a contract (typical of drainer phishing)"
]
},
"type": "json"
}