Nancy|Nov 03, 2026 08:12
My goodness, our open-source tool is being targeted!
After my tool was open-sourced, some projects treated our program like a manual, studying it and designing contracts specifically to match the tool's rules, trying to trick users into spending money without their knowledge.
Let me first introduce what my tool is: it's a free on-chain anti-cheating tool, a local tool installed on your own computer.
1. The private key always stays on your computer; the tool can't access it and it's never uploaded.
2. Every transaction is rehearsed before being sent. If there are authorization traps, additional coins are deducted, or more is spent than agreed upon, the transaction is stopped.
3. Supports both BNB Chain and Robinhood Chain, including charting, one-click buying and selling, profit and loss control, and Agent ID-specific minting monitoring.
4. Contract code scanning, which can be submitted to your own AI for review with one click.
5. Even those who can't program can use their own AI to add features and panels to the tool; add whatever you want.
6. You can remotely control buying and selling, and even stop everything in an emergency, using Telegram when you're not at your computer. A mobile version will be developed tonight.
7. Market data is provided by AVE; holder information, tax rates, risk scores, and contract analysis are readily available.
8. No transaction fees, no commission, no membership fees.
The original intention of open source is transparency; everyone can see what the tool is doing, eliminating concerns about stolen private keys or hidden fees. However, open source is a double-edged sword. With all rules publicly available, bad actors can also see them. They know exactly when the tool will act, where it checks, and where it doesn't. These unscrupulous individuals then start writing contracts and launching projects that target these rules.
Some set the total supply very small, allowing a few people to artificially inflate the progress and lure the tool into copying. Some package "free" minting as requiring a small transaction fee, deducting it gradually. Others use a different contract to sell NFTs, bypassing the "no minting without NFT activation" rule. Each transaction is small, but the tool is automated, and a day's worth can add up to a significant sum.
What have I done these past two days?
1. We conducted an independent review, re-examining all potential payment paths from a malicious perspective. We released two security updates, 1.0.13 and 1.0.14, patching all identified vulnerabilities.
2. Functions not enabled by the user will not incur charges. A final check is performed just before a transaction is sent; pressing the "Stop All" button in an emergency will permanently stop the transaction.
3. Rules are no longer uniform; each number is user-defined, making it impossible for malicious actors to use a fixed set of thresholds for phishing.
4. Important services are now verified on our end. Those who modify local programs or bypass invitation codes will not receive them.
These changes provide tools for users to set values, ensuring each user's functionality is different. AI can also be used to add custom functions, among other things. Finally, we hope these despicable individuals will stop launching Ponzi schemes for petty profits; otherwise, their children will be born without an anus.
A few reminders: Users currently using the beta version, please update to the latest version immediately. Click the button in the upper right corner , or type "update" in your Telegram bot. All older versions of tools prior to the beta version are disabled.
We only accept the official GitHub: nancyc0813-maker. Modified versions leaked elsewhere will not receive our security updates.
For beta users, please note: If you encounter situations where money is deducted even though you didn't click anything, please let me know, and I will investigate.
Public beta will be available tonight.
BNBChain AIAgent (on-chain security)
Share To
Timeline
HotFlash
APP
X
Telegram
CopyLink