Detect DeFi Token Rug Pulls

AI Rug Pull Detector & DeFi Security Scanner

This workflow analyzes any DeFi token for rug pull risk by gathering intelligence from five trusted blockchain data sources. It fetches contract details, liquidity info, on-chain address intelligence, social sentiment, and security metrics, then uses an AI agent to produce a comprehensive risk assessment. Results are delivered via Gmail and Telegram alerts.

What It Does

1. Queries Etherscan for contract source code and verification status.
2. Fetches DEX liquidity pool and trading data via DexScreener.
3. Retrieves on-chain intelligence and entity labels from Arkham Intelligence.
4. Collects social sentiment and interaction data from LunarCrush.
5. Gets token security metrics (honeypot status, holder distribution, blacklist functions, etc.) from GoPlus Security.
6. Merges all data and uses an AI agent to generate a detailed risk report with scoring and classification.
7. Formats the report and sends alerts to Gmail and Telegram.

What You Need

• Etherscan API key — for contract verification lookups
• Arkham Intelligence API key — for on-chain address intelligence
• LunarCrush API key — for social sentiment data
• Gmail connector — configured with OAuth for sending email alerts
• Telegram Bot connector — configured for sending chat messages
• Token address and symbol — for the token you want to investigate

⚠️ Important: The config code node contains placeholder API keys. You must replace them with your own valid keys before running the workflow. Never share or commit real API keys in workflow templates.

How the Flow Works

The workflow runs on a scheduled trigger every 6 hours (12AM, 6AM, 12PM, 6PM Eastern), but you can also trigger it manually for on-demand scans.

Risk Scoring Model

The AI agent computes individual risk scores (1–100) for six categories, then calculates an overall risk score using weighted averages:

The overall score maps to a risk level and recommendation:

Output

At the end, you receive alerts containing:

• Risk scores for each of the six categories, each scored 1–100
• Overall risk level classification: LOW, MEDIUM, HIGH, or CRITICAL
• Recommendation: SAFE, CAUTION, AVOID, or SCAM
• Rug pull probability as a percentage
• Confidence level (HIGH, MEDIUM, or LOW) based on how many data sources returned usable data
• Security findings including honeypot status, mintable check, proxy detection, blacklist function, owner privileges, liquidity locked status, and more
• Top red flags — a prioritized list of concerns or a neutral monitoring note if none are detected
• Detailed analysis explaining what each source returned and how each risk score was derived

The email alert is a styled HTML report with a dark theme, and the Telegram alert is a Markdown-formatted summary with emoji indicators.

Configuration

To set up the workflow, edit the config code node with your values:

Notes

• The workflow uses fallback rules so that key fields like token address and symbol always have a meaningful value, even if some APIs fail.
• Risk scores default to conservative middle values (50) when data sources are missing or incomplete.
• The AI agent applies a weighted formula with strict normalization rules to interpret data consistently.
• DexScreener and GoPlus are free APIs that don't require keys, but Etherscan, Arkham, and LunarCrush require valid API keys.
• Keep all API keys up to date to avoid missing or partial data.
• DeFi token risk profiles can change rapidly — continuous monitoring and periodic re-assessment are recommended.