Risk Scoring

​

Overview

When a transaction hits /queue, the server runs analyzeRisk() instantly against your behavioral profile. This is deterministic and synchronous — no LLM, no async roundtrip. The agent only acts after the verdict is determined.

​

Scoring Factors

​

Score Thresholds

​

Deep Analysis

For REVIEW-tier transactions, the agent automatically calls:

• GoPlus Security API — recipient address reputation, sanctions lists, phishing and known scam detection
• Honeypot.is — token security: honeypot detection, mintable supply, buy/sell tax rates

The full report is delivered to Telegram before the user decides.

​

Learned Patterns

Patterns are stored in patterns.json and updated after every confirmed transaction:

• Known recipient addresses and their typical amounts
• Time-of-day activity windows
• Per-transaction and daily volume limits
• Token categories

The profile improves continuously — no manual configuration needed.

​

Auditability

Risk scores, verdicts, and reasons are stored on each PendingTransaction object. Every decision is traceable.