By Bryan Martin - founder of RektRadar. Ethereum scam-detection infrastructure since 2024. GitHub - LinkedIn.
Money on Ethereum leaves a trail. Every time one wallet funds another, or a wallet deploys a token, that relationship is a permanent edge in the chain’s history. RektRadar has spent months tracing those edges backward and forward from known scam deployers. The result is a graph of 10,131,306 funding and deployment relationships connecting the wallets, funders, and tokens behind Ethereum’s scam economy.
Today we turned that graph into a question anyone can ask of their own address: did my ETH end up funding a scam? Paste a wallet into the 3D explorer and Wallet Rekt Check walks the funding graph downstream, then colors every known scam it reaches in red.
The wallet above resolves to 101 reachable addresses. Five of them are known scams. Four were funded directly. Verdict: victim.
Dataset snapshot
Snapshot: 2026-07-14. The graph lives in two Postgres tables populated by our on-chain crawler (which walks native ETH transfers and internal calls via trace_filter / trace_block against an archive node).
graph_edges: 10,131,306 directed edges - 7,487,810 funding transfers + 2,643,496 contract deploymentsgraph_nodes: 38,594 classified addresses - 32,808 deployers, 5,548 plain wallets, 227 contracts, 11 exchanges- The edges reference far more addresses than the 38,594 classified nodes: any wallet that ever touched this world is walkable, even if we never labelled it
Every deployer leaves a funding trail
The 3D explorer has been public for a while. Enter a token deployer and you get its network: the wallets that funded it, the tokens it launched, and the funders behind the funders, out to twenty hops. Dense clusters of bot wallets collapse into super-nodes (the xN blobs) so a scam operation with hundreds of wallets stays legible instead of turning into a hairball.
That was built for researchers looking at deployers. The obvious next question came from the other direction: what if the address you care about is your own wallet?
Wallet Rekt Check: follow the money downstream
The mechanic is a bounded graph walk. Starting from your address, it follows funded and deployed edges downstream - where your ETH went, and where that went - up to a few hops. For every address it reaches, it checks one column: scam_contracts_deployed. If that address has shipped a scam contract, it is a hit.
Two numbers carry the signal:
- Scams reached: how many distinct known-scam addresses are downstream of you at all
- Funded directly: how many of those you sent ETH to at hop 1
The second number is the sharp one. A direct hop-1 funding of a flagged scam address means you (or this wallet) sent ETH straight to a drainer or a scam deployer. That is the closest thing on-chain to “you got rekt.”
Victim, operator, or just connected
Reaching scams is not automatically bad news - it depends on how. So the raw counts get turned into a plain-language verdict:
| Verdict | Rule | Reading |
|---|---|---|
| clean | no scam reachable | your ETH does not flow into any known scam |
| victim | funded 1 to 4 scams directly | you sent ETH straight to a flagged scam |
| operator | funded 5 or more directly | you are wired into the machinery, not a one-off casualty |
| connected | reaches scams only indirectly | your money touches scams downstream, but you never funded one directly |
The gap between the last two is the whole point. Take the wallet in the video: 101 reachable, 5 scams reached, 4 funded directly - a victim, someone who paid a handful of scams. Now compare a wallet like 0x26048636...: 2,214 reachable, 239 scams reached, 49 funded directly. Same tool, completely different story. That is not a victim. That wallet directly bankrolls dozens of scam deployers - it is an operator hub, and the graph makes it obvious at a glance.
What the red nodes mean
The 3D view is not decoration. The wallet sits at the center; the grey nodes are the ordinary addresses and tokens in its network; the red nodes are the scams it reached, sized up and glowing so they stand out of the grey. When a reached scam is inside a collapsed cluster, the whole super-node turns red too, so the highlight survives the clustering. Rotate it and you are literally watching your funding chain reach into scam territory.
What we are not claiming
There are two ways a wallet gets “rekt”, and this tool only covers one of them.
- Sent ETH into a scam (funding chain) - this is what Wallet Rekt Check does. It is a pure read of the funding graph.
- Bought a scam token (a honeypot you could not sell) - the classic retail rug. That is a swap relationship, not a funding edge, so it lives in different data. We can see who bought (528,000+ distinct swap buyers indexed) but connecting a wallet to the specific scam tokens it holds needs a token-transfer lookup we have not wired into this feature yet.
If your loss was buying a honeypot rather than sending ETH to a drainer, this particular view may say clean. That is a scope limit, not a clean bill of health.
Limits of our data
- Coverage is scam-seeded. The graph grows outward from known scam deployers and their funding chains. A wallet that has never touched that world returns
0 / 0 / 0(clean) - which is correct, but it also means an obscure scam we never indexed will not light up. - Verdict thresholds are heuristic. The 1-to-4 vs 5+ direct cut between victim and operator is a starting point tuned by hand, not a proof. A wallet that funded exactly 5 scams is not categorically different from one that funded 4.
- Bounded depth. The walk stops after a few hops and caps how much it traverses, so a scam buried very deep downstream of a huge wallet can be missed.
- A label is a label. “Scam” here means the address has deployed a contract our pipeline scored as a scam. Our scorer has false positives and false negatives like any classifier.
TL;DR
- RektRadar indexes 10.1M funding/deployment edges across 38,594 classified Ethereum addresses.
- Wallet Rekt Check walks that graph downstream from any wallet and flags the known scams its ETH reached, in a rotating 3D view with the scams in red.
- Funded directly (hop 1) is the real victim signal; the verdict separates a victim (funded 1-4) from an operator (funded 5+).
- It covers “you sent ETH into a scam”, not “you bought a honeypot” - different data, honest scope.
Check any wallet yourself, free, no signup, no card - paste an address and watch the chain.