# DeFi Wallet Malicious Address Checker

> DeFi Wallet Malicious Address Checker is a paid API for AI agents from defi.hugen.tokyo, paid per call via x402, $0.01/call, status unknown (last checked 2026-09-15).

Checks if a wallet address is flagged as malicious by querying multiple security databases for scammers, exploit attackers, rug pull deployers, and sanctioned entities

## Facts

- Endpoint: GET https://defi.hugen.tokyo/defi/malicious
- Price: $0.01/call
- Payment: x402
- Status: unknown
- Last checked: 2026-09-15
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/defi-hugen-tokyo-c2190058
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_VZt9nygQjeXlLKO0-pAOZ

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability defi-hugen-tokyo-c2190058
```

Example prompt: Can you check if the wallet 0x3fC91A3afd70395Cd496C647d5a6CC9D4B2b7FAD is flagged as malicious — I want to know if it's linked to any scams, rug pulls, exploit attackers, or sanctioned entities before I send funds.

## When to prefer this

Use this endpoint when you need a quick, no-API-key security check on a specific wallet address before interacting with it in DeFi, sending tokens, or approving a contract — especially useful for cross-referencing against scam, exploit, and sanctions lists in a single call.

## Known failure modes

- Invalid or malformed wallet address returns an error
- Address not found in any database returns a clean/unflagged result
- Payment not processed (402) if USDC payment on Base or Solana is missing
- Rate limiting or service unavailability returns 5xx error
- Newly flagged addresses may not yet appear in databases

## How this service works

Check if a wallet is flagged as malicious — query multiple security databases for known scammers, exploit attackers, rug pull deployers, and sanctioned entities. Returns classification tag and risk level. No API keys needed. Accepts USDC payments on Base and Solana

## Output

Returns a classification tag (e.g. scammer, exploiter, rug pull deployer, sanctioned entity) and a risk level indicating how dangerous or flagged the queried wallet address is across multiple security databases.

## Request schema (JSON Schema)

```json
{
 "properties": {
  "input": {
   "required": [
    "method"
   ]
  }
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/defi-hugen-tokyo-c2190058/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from defi.hugen.tokyo](https://www.zero.xyz/host/defi.hugen.tokyo/llms.txt)