Contract says 0% tax. Reality: 12% sell tax kicks in after the first few buys. Static analysis can't see runtime behavior.
Token passes every code scanner. But try selling? Transaction reverts. Only a real swap simulation catches this.
The deployer has rugged 4 previous tokens. No static scanner checks wallet history. DryRunSec does.
GoPlus + Honeypot.is aggregation. Proxy detection, ownership analysis, mint functions, blacklist mechanisms.
Real buy/sell simulation via direct RPC eth_call with state overrides. Detects actual tax rates and honeypot behavior.
Deployer wallet history analysis. Balance, contract count, nonce, and cross-reference with known rug-pull patterns.
A composite score from 0-100, category breakdowns, actual tax rates from simulation, and specific risk flags with severity levels.
{
"score": 23,
"riskLevel": "HIGH",
"recommendation": "AVOID",
"taxRates": {
"buy": 5.2,
"sell": 12.8
},
"riskFlags": [
{
"severity": "critical",
"finding": "Honeypot Detected"
},
{
"severity": "high",
"finding": "Hidden Tax: 12.8%"
},
{
"severity": "high",
"finding": "4/6 tokens rugged"
}
],
"dataQuality": "FULL"
}
| Feature | DryRunSec | WachAI | x402guard |
|---|---|---|---|
| Static Code Analysis | ✓ GoPlus + Honeypot.is | ✓ Basic | ✓ Basic |
| Dynamic Swap Simulation | ✓ Real RPC eth_call | ✗ | ✗ |
| Deployer Wallet Profiling | ✓ Full history | ✗ | ✗ |
| Actual Tax Rates | ✓ Simulated | ✗ Declared only | ✗ |
| DEX Liquidity Check | ✓ DexScreener | ✓ | ✗ |
| Response Time | < 15 seconds | ~30 seconds | ~20 seconds |
| Price per Report | $3 – $5 | ~$5 | $10 |
| ACP Compatible | ✓ | ✓ | ✓ |
Example: 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 (USDC on Base)
# Scan any Base chain token curl -X POST https://dryrunsec-production.up.railway.app/api/token-report \ -H "Content-Type: application/json" \ -d '{ "tokenAddress": "0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913", "chainId": 8453 }' # Check service health curl https://dryrunsec-production.up.railway.app/api/health