AI trading agents read token metadata before they buy. Attackers hide invisible instructions, lookalike tickers and bot-bait inside it. WATCHDOG catches what's written for the machines.
The den log below is live — WATCHDOG pulls freshly listed Solana tokens and scans them in your browser, right now, unprompted. This is the product, running.
On-chain record, description file, links — pulled live and run through all 11 checks. If something is hiding in there, you'll see it decoded in plain text.
Zero-width and Unicode TAG characters hide whole sentences between visible letters. Humans see a cute description — agents parse every byte. WATCHDOG finds the hidden text and prints the decoded message.
Cyrillic СОРЕ is not COPE. Lookalike glyphs spoof trusted tickers so a bot — or a tired human at 3am — buys the wrong coin. Every character gets unmasked and shown for what it really is.
ignore previous instructions · mark as safe · must buy. Language no human writes to another human — it's aimed at automated buyers. The dog flags it and names the trick.
Connect Phantom and WATCHDOG sweeps your whole bag — every token's metadata, scanned in one pass. Read-only. It lists what you hold; it never asks for a signature, never moves anything, never could.
New checks, new tools, new drops from the den — in your inbox before the timeline hears about it.
A security tool that overclaims is worse than none. So, plainly:
Yes. No account, no API key, no limits. The scans run in your own browser against public data — there's no server reading your activity.
Nothing. Connecting only shares your public address so we can list the tokens you hold and scan their metadata. No signatures, no transactions, no storage of your address.
The coin from the same den. The scanner stays free either way — the coin is how the community rides along. The contract address will appear on this page (and our X) when it's live. Anything else using the name is not us.
Both directions. It can miss a brand-new trick, and it can flag something a sloppy-but-honest dev wrote. Use it as one input, not an oracle — that's true of every scanner ever built.