Live community scans
Scan Polymarket bots for wallet drains and credential theft before you run them. Free.
Paste any GitHub URL to scan entire repositories. Analyzes all Python, JavaScript, and TypeScript files for threats.
Paste code directly into the scanner for instant analysis. Supports Python, JavaScript, and TypeScript.
Opus 4.5 powered deep analysis detects novel attack patterns beyond simple regex matching.
Access previous scans instantly
Share reports via link or download
Catches credential theft attempts
Detects typosquatted libraries
These attacks have stolen hundreds of thousands from traders running unverified code.
Dec 2025
Malicious validate_mcp function stealing private keys via hidden dependency
2+ Years
Malware hidden after 2000+ whitespace characters in Python files
Ongoing
Fake packages mimicking official Polymarket libraries
Scan any code in 3 simple steps
Copy the bot code or paste a GitHub repository URL into the scanner input.
Click "Scan Code" or "Scan Repository" and let our AI analyze every line for threats.
Review the detailed findings, severity ratings, and download the full PDF report.
PolyDefender scans for 1,200+ threat patterns across 12 attack categories.
Built specifically for the Polymarket trading community
Everything you need to know about PolyDefender
Yes! PolyDefender is 100% free to use with no account required. Simply paste your code or a GitHub URL and get instant security analysis. No credit card, no sign-up.
We currently support Python, JavaScript, and TypeScript — the most common languages used in Polymarket trading bots. This covers .py, .js, .ts, and .tsx files.
No. Your code is analyzed in real-time and never permanently stored on our servers. We prioritize your privacy — scan results are cached temporarily for sharing links but the source code itself is not retained.
PolyDefender uses a two-layer approach: first, pattern matching against 1,200+ known threat signatures (including Trust412, GitVenom, and typosquatting attacks). Then, AI-powered deep analysis detects novel and obfuscated threats that simple regex can't catch.
Yes! Paste any public GitHub repository URL and PolyDefender will automatically scan all supported files in the repo. It analyzes the entire codebase and produces a combined security report.
Do NOT run the code. Review each finding carefully — the report includes explanations of what each threat does, its severity level, and recommended remediation steps. When in doubt, avoid the code entirely.
Our threat database is updated regularly as new Polymarket-targeted attacks are discovered. This includes patterns from real attacks like Trust412, GitVenom, and emerging typosquatting campaigns.