TRONSEC — Free Wallet, AML & Phishing Scanner for TRON (no wallet connection needed)

TRONSEC — Free On-Chain Security Scanner for the TRON Ecosystem

Hey TRON community :waving_hand:

I want to share a tool I’ve been building; TRONSEC — a free, read-only security terminal for TRON.

No wallet connection required. No registration. Just paste an address, transaction ID, or URL and get a full risk report.


What it does

:magnifying_glass_tilted_left: Wallet Scanner
Portfolio value, TRC-20 holdings, staking, energy & bandwidth meters, security flags, and recent transaction history.

:shield: AML Check
Behavioral risk screening on the last 400 transactions — composite risk score, counterparty concentration, flagged addresses, and an interactive force-directed graph of counterparties.

:white_check_mark: Approvals Monitor
Audit active TRC-20 allowances on any wallet. Surface unlimited approvals and unknown spenders before they drain your tokens.

:link: URL Phishing Scanner
Multi-engine reputation check via VirusTotal + typosquatting heuristics. Paste any link before you click it.

:page_facing_up: Contract Scanner
ABI-level risk analysis — detects mint, pause, blacklist, and ownership transfer functions.

:unlocked: TX Decoder
Paste a TXID to decode transfers, approvals, contract calls, fees, and automated risk heuristics.


Why We built it

There’s no free, all-in-one security tool for TRON that non-technical users can actually use. Every time someone asks “is this wallet safe?” or “should I click this link?” — there’s no clean answer. TRONSEC is my attempt to fix that.


Technical notes (for the devs)

  • Reads directly from TronGrid and TronScan APIs
  • API keys never touch the browser — routed through a Cloudflare Worker proxy
  • Fully read-only, no wallet connection, no data stored
  • Open for feedback on methodology (AML scoring, approval risk thresholds)

:link: Try it: TRONSEC — TRON Wallet, Contract & Approval Scanner

Would love to hear feedback from the community — especially on the AML scoring and anything I might be missing. What security checks do you wish existed for TRON?

16 Likes

Just checked my addy through this — found 3 unlimited approvals I forgot about. Kinda scary ngl. The AML graph is also wild, you can see exactly where your TRX has been

1 Like

Quick question for the devs — does the AML heuristic also check for interaction with known mixer/tornado-style contracts on TRON? I see it flags suspicious patterns but wasn’t sure if specific contract blacklists are used. Also, any plans for a browser extension? Would be killer as a right-click “scan this address” thing

2 Likes

Great questions! Here’s the breakdown:
On mixers/tornado-style contracts: The current heuristic doesn’t specifically flag known mixer contracts by address — it’s behavioral. It analyzes the latest 400 transactions and flags based on:

  • Counterparty concentration (if >70% of TX volume goes to one address)
  • Presence of any TronScan-tagged addresses (scam, phish, fraud, blacklist, sanction, hack, exploit)
  • Direct transfer velocity (50+ = high, 20+ = elevated)
  • Account age (<7 days = suspicious for active wallets)
  • Low counterparty diversity with high TX count
  • Hard signals from TronScan’s security API: blacklist status, fraud transactions, token creation, spam memos

A dedicated mixer/Tornado-style contract blacklist is a good call — I’ll add it to the pipeline. Know any known TRON mixer addresses I should include?
Browser extension: It’s on the roadmap! Right-click “Scan this address” is exactly the UX I want. The API proxy (Cloudflare Worker) is already built to handle it — just need to package the frontend as a Chrome/FF extension. No ETA yet but it’s the logical next step after the web app stabilizes.

3 Likes

Vanity TRON addresses — generate offline, keys never leave your device

TRONSEC v1.0.2 adds a Vanity Address Generator: pick a prefix, suffix, or contains pattern and brute-force a valid TRON Mainnet address.

The search runs 100% client-side with multi-core Web Workers. No private keys uploaded. No account.

Offline-friendly: open the app once at TRONSEC — TRON Wallet, Contract & Approval Scanner (or save the page / add to home screen). Once loaded, you can turn off the internet and keep generating — vanity doesn’t call any APIs, only your CPU.

Same read-only security terminal as before (wallet scan, approvals, AML, TX decoder, etc.). Vanity is module #9.

Try it: TRONSEC — TRON Wallet, Contract & Approval Scanner

10 Likes

Godlike module and a good tool overall; all that’s left is to add energy rent — is that on the roadmap?

1 Like

Thanks! Right now our focus is on the security/AML modules, but energy rent is a frequent request, so we’re not ruling out integrating with existing energy marketplaces in the future (rather than building our own market from scratch).

1 Like

TRONSEC update — July 2026

Hey TRON community,

Quick update on TRONSEC — free, read-only security tools for TRON Mainnet. No wallet connect, no registration.


What’s new

TRONSEC Academy — 54 guides (+15 new)

Six learning tracks: wallet · approvals · AML · phishing · contracts · transactions

New guides include:

  • USDT beginner safety checklist
  • What to do if you were scammed on TRON
  • SunPump / fake airdrop / TRC-10 spam
  • Decode a TXID before TronLink confirms
  • Freelancer & merchant USDT payment safety
  • Hardware wallet signing, JustLend approvals, vanity address risks
  • Fake support scams, staking/freeze security

8 languages · beginner / intermediate / advanced paths · each guide links to the matching free tool


App — 9 free modules in one terminal

  • Wallet Scanner
  • AML Risk Check
  • Approvals Monitor
  • Phishing URL Scanner
  • Contract Scan
  • TX Decoder
  • Vanity Address Generator
  • Network Analytics
  • Report Scam

Recent improvements:

  • Market overview shown first in Network Analytics
  • AML: quick link to Contract Scan when you paste a contract address
  • Captcha modal no longer leaves a stuck spinner on cancel
  • Mobile menu: GitHub + Telegram links
  • Home page highlights all 9 tools
  • i18n fixes across 8 locales

Open source (MIT)


Try it in 30 seconds

  1. Paste a wallet address → Wallet Scanner + AML
  2. Paste a pending TXID → TX Decoder before you sign
  3. Paste a dApp URL → Phishing Scanner
  4. Review active USDT approvals → Approvals Monitor

Feedback welcome in this thread. Stay safe on Mainnet.

1 Like

TRONSEC v1.1 — wallet scanner, analytics & faster scans

We shipped an update to tronsec.io — free read-only TRON security tools, no wallet connect required.

What’s new

Network Analytics — 7-day TRX price, energy/bandwidth usage, and USDT transfer charts. Better mobile layout with tooltips.

Wallet Scanner — session cache for repeat scans, on-chain TRC-20 approval count, heuristic risk score (0–100, clearly labeled as not AML), PDF/copy export, and one-click next steps to Approvals or AML with the address prefilled.

Approvals & AML — session cache; Approvals always runs full on-chain allowance enrichment.

UX — TronScan API cache with request dedupe, light theme contrast fixes, mobile action buttons with text labels.

Links

Feedback welcome here or in Telegram.

TRONSEC v1.2 — Permission auditor, AML v2 & mobile PWA

We shipped another update to tronsec.io — free read-only TRON security tools, no wallet connect required.

What’s new

Permission auditor — owner / active / witness permissions, multisig thresholds, external controllers, dangerous operation scopes, permission-change history, 0–100 risk score.

AML check v2 — TronScan red-tag hard flags, inbound/outbound activity scoring, first-funder intel, DEX/CEX peer allowlist, improved counterparty badges on the fund-flow graph.

TX decoder — dust-attack and address-poisoning heuristics (micro transfers, lookalike addresses, high-volume dust senders).

Wallet scanner — smart-contract detection with redirect to Contract Scan; one-click jump to Permission auditor for multisig / external-controller accounts.

Mobile app (PWA) — install TRONSEC on your home screen (no app store): Android install prompt or iOS “Add to Home Screen” guide in the app. Standalone full-screen UI with bottom navigation, touch charts, and mobile-optimized scan results. Same modules, still read-only.

UX — branded PDF export (Wallet & AML), faster AML scan feedback, full onboarding tour in 8 languages, refreshed command palette.

Links

Feedback welcome here or in Telegram.

TRONSEC — full product demo (6 min walkthrough)

Hey TRON community,

We published a full walkthrough of TRONSEC on YouTube — every module in one pass, no wallet connect, no signup.

Watch: https://www.youtube.com/watch?v=AwwVFx8PJgc

Try it: TRONSEC — TRON Wallet, Contract & Approval Scanner
Academy: TRONSEC Academy — TRON Security Guides by Topic
GitHub: GitHub - jamejohns/tronsec: Read-only TRON security terminal — 10 modules, no wallet connect. On-chain risk, AML, approvals, phishing, contracts, TX decode. Pet OSS: tron-phish-rules, tron-approvals-check, tronsec-worker-starter. https://tronsec.io · GitHub

If you try the demo and spot something we should explain better — or a check you wish TRONSEC had — reply here. Feedback directly shapes the roadmap.

Stay safe on Mainnet.

TRONSEC update 1.2.1 — deeper owned-wallet AML & scanner checks

We shipped another update to tronsec.io.

Everyday scanning is still free and read-only: paste any address, URL, or TX — no wallet connect, no seed phrase, no account.

Optional connect is for when you want to go deeper on an address you control.

What’s new

Deeper AML (owned wallet) — after an AML scan, connect the wallet under review for a tighter pass on:

  • counterparties
  • public sanctions / watchlist hits
  • concentration risk

Still read-only first. Signing only if you later revoke approvals

Wallet Scanner — owned-wallet check — connect the wallet you’re verifying for a fuller portfolio and resource read, plus a clear path to review and revoke risky TRC-20 approvals.

Approvals → Revoke — the Revoke button is active and opens connect when you’re ready to move toward signed revoke actions.

Try it: tronsec.io/app

Feedback welcome — especially on the deeper AML flow, the owned-wallet CTA, and Approvals.

gm TBL — TRONSEC is live on Mainnet under Infrastructure & Security.

Free read-only TRON security terminal (wallet / AML / approvals / phishing / permissions / TX decode).
Approvals: live on-chain allowance audit + active Revoke → wallet connect.
Optional owned-wallet connect for deeper AML/scanner checks.

TBL intro: TRONSEC — Free TRON security terminal (wallet, AML, approvals, phishing)
App: TRONSEC — TRON Wallet, Contract & Approval Scanner

1 Like