ETHEREUM MAINNETLAUNCH SCANNER
ETHEREUM WALLET SECURITY INSTRUMENT

FIND OUT
WHAT'S
ALREADY
EXPOSED

NOLEAK checks whether your Ethereum wallet's public key is already visible onchain, and shows the verified evidence behind it. Read-only. No connection. No signing.

WALLET EXPOSURE SCANNERCHAIN 01 / ETHEREUM

NO SIGNATURE REQUIRED · READ-ONLY · BOUNDED HISTORICAL COVERAGE

EVIDENCE OVER OPINIONVERIFIED RECORDS ONLY

INDEPENDENT INTELLIGENCE
ANALYZE / UNDERSTAND / PREPARE
  • ANALYZE
  • UNDERSTAND
  • PREPARE
A READ-ONLY INSTRUMENT FOR WHAT'S ALREADY ONCHAINPRESS ⌘K OR / TO SCAN FROM ANYWHERENOLEAK — THE OBSERVATORY FOR ETHEREUM
02 / OUR METHOD

Security isn't just what's locked. It's what's already visible.

NOLEAK turns public cryptographic evidence into understandable decisions.

READ THE METHOD ↗

Intelligence at every layer.

One instrument. Four complementary perspectives.

  • 01 / MODULE

    Scanner

    Inspect public-key visibility and transaction evidence.

    OPEN →
  • 02 / MODULE

    Multisig

    Review thresholds, signers, modules and control paths.

    OPEN →
  • 03 / MODULE

    Migration

    Preflight a move before approving it in your wallet.

    OPEN →
  • 04 / MODULE

    Guardian

    Watch for changes and record findings.

    OPERATOR ONLY
THE EXPOSURE LIFECYCLE / 001

When keys become visible.

A calm, four-stage explanation of onchain signing and key exposure.

  1. STEP 01 / KEY

    The key is not yet public

    Fresh EOA. No verified onchain signature in coverage.

    CHAIN / ETHEREUM
  2. STEP 02 / SIGNATURE

    A transaction is signed

    A public signature is attached to an Ethereum transaction.

    CHAIN / ETHEREUM
  3. STEP 03 / PUBLIC

    The public key is revealed

    A valid ECDSA signature enables recovery of the public key.

    CHAIN / ETHEREUM
  4. STEP 04 / RESPOND

    Plan, do not panic

    Review the actual evidence before planning a migration.

    CHAIN / ETHEREUM
NOLEAK / RULES INDEX

What the scanner checks.
And what it can't.

  • EXPOSED ONCHAINA signature was found and verified.
  • UNKNOWN / PARTIALNothing verified in the checked coverage.
  • CONTRACT ACCOUNTNo EOA key of its own.
  • NOT COMPLETEDNo status was inferred.
  • 0001 / 0008EVIDENCE

    Signed transaction recovery

    Recovers the signer of a canonical mainnet transaction with ECDSA and checks it equals the address.

    TX_ECDSA_RECOVERYBOUNDED RANGE + ADDRESS INDEX
  • 0002 / 0008EVIDENCE

    EIP-7702 authorization

    Recovers the authority of 7702 authorization tuples, including ones sponsored by another sender.

    EIP7702_AUTHORITY_RECOVERYBOUNDED RANGE ONLY
  • 0003 / 0008POINTER

    Address history index

    Etherscan or Alchemy return candidate hashes. Each is re-fetched over RPC and re-verified before it can count.

    ADDRESS_INDEXNEVER EVIDENCE ON ITS OWN
  • 0004 / 0008HINT

    Account nonce

    A nonce above zero means the account has signed before. It is a hint until the signature is located.

    NONCE_HINTSTATUS STAYS UNKNOWN WITHOUT RECORDS
  • 0005 / 0008HINT

    Contract account

    Code at the address means there is no EOA key of its own. Review owners, modules and admin roles.

    CONTRACTSNAPSHOT BLOCK
  • 0006 / 0008LIMIT

    Token approvals

    Allowances are not checked by this scanner version.

    APPROVALSNOT CHECKED
  • 0007 / 0008LIMIT

    Offchain signatures

    Permit, login and other signed messages never touch the chain, so they cannot be observed here.

    OFFCHAINUNOBSERVABLE
  • 0008 / 0008LIMIT

    Other networks

    Only Ethereum mainnet is checked. The same key may have signed on other EVM chains.

    OTHER_EVMNOT CHECKED
PRODUCT / EXPOSURE INTELLIGENCE

No mystery scores. Just the evidence.

NOLEAK / REPORT VIEWDEMO / FICTIONAL
EXAMPLE ADDRESS

0x5a1e…c09b

! EXPOSED ONCHAIN

RESULTS
2 RECORDS
RULESET
1.9
COVERAGE
PARTIAL
STATE
DEMO
VERIFIED RECORDS / EXAMPLE
RULEBLOCKEVIDENCE
TX_ECDSA_RECOVERY#12,887,2100x5a1e…c09b
TX_ECDSA_RECOVERY#21,004,5090x77d0…1f3a

Onchain visibility does not establish private-key compromise. This example is fictional.

ALL DEMONSTRATION DATA IS FICTIONAL

Independent work.
Explicit consent.

Additional services are optional, and disclosures are always user-controlled.

NOLEAK MANIFESTO / 004

Don't trustthe green checkmark.Trust the evidence.

YOUR NEXT STEP

Make the invisible verifiable.

START A SCAN ↗