NOXWALLET
Sign in Create wallet
NOXWALLET
Create wallet — Free
AI Guardian · Always on · Always free

The wallet that thinks before you sign.

Guardian is an AI security layer living inside Nox. It intercepts every transaction — incoming and outgoing — decodes what it really does, screens everyone involved and hands you a plain-language verdict. All before your money moves.

Create wallet — Free Try the live demo ↓
<800msClick to verdict
2-wayIncoming + outgoing
24/7Nothing to switch on
$0Free for everyone
Guardian Mode — a shield protecting a phone wallet from scam tokens, phishing and drainers Threat blocked
How it thinks

From click to verdict
in 800 milliseconds.

Four stages run on every single transaction. You never see the machinery — only the verdict, in plain language.

0 ms 01

Intercept

Every signing request and every incoming asset is caught before it touches your wallet — across all 20+ chains.

~120 ms 02

Decode

Calldata, Solana instructions and token contracts unpacked into human-readable actions. No hex dumps.

~450 ms 03

Screen

Everyone involved runs through Chainalysis sanctions, GoPlus reputation, the official token registry and a known-scam list.

<800 ms 04

Verdict

A clear risk verdict, explained by Claude. Critical actions demand a deliberate 1–2 second hold-to-confirm.

Transaction Review Ethereum
!
setApprovalForAll

Grants an unknown operator control of all NFTs in Bored Apes. Classic drainer pattern.

Recipient0x9f…2bC1 · Unknown
Sanctions checkClear · OFAC/EU/UN
CalldatasetApprovalForAll(true)
Guardian verdictHigh risk
Blocked by Guardian · hold-to-confirm required
Pick a threat ↓
Live demo

Poke it.
It pokes back.

This is the exact review screen Guardian shows in the wallet. Pick a threat on the left and watch how each one gets decoded, explained and stopped.

Nothing is hidden

Recipient, calldata, sanctions status and the verdict — every row of the review is shown before you sign.

Fast enough to be invisible

The full pipeline fits inside the time it takes a signing popup to open. Safety with zero friction.

Two-way protection

The scam usually
arrives first.

Other wallets only react when you press send. Guardian also scans what lands in your wallet — because drainers start with a bait token, a dusted address or a fake airdrop.

Incoming

< 800ms
  • 01
    Token authenticityReal USDT or a fake contract with the same ticker? Checked against an official registry across 14 EVM chains + Solana.
  • 02
    Address poisoningDetects look-alike addresses that copy the first & last characters of your real contacts.
  • 03
    Honeypot detectionFreeze & mint authorities, transfer hooks and holder concentration analysed for every SPL token.
  • 04
    Dust & bait attacksSub-$0.10 spam blasts and approval-bait tokens auto-sorted into Suspicious — hidden, no value shown.

Outgoing

Pre-sign
  • 01
    Calldata decodingPlain transfer or approve(maxUint256)? Critical actions require a deliberate 1–2s hold-to-confirm.
  • 02
    NFT setApprovalForAllA full-red warning with collection name and operator address — the #1 NFT drainer pattern.
  • 03
    Off-chain authorizationsPermit2 & EIP-2612 signatures that can drain you later are surfaced, not hidden as "just a signature".
  • 04
    Solana instruction decoderEvery instruction shown and colour-coded. setAuthority & transfer hooks flagged red and blocked.
Threat library

Eight ways to lose
a wallet. All covered.

T-01

NFT drainers

setApprovalForAll to an unknown operator — one signature hands over an entire collection.

Blocked
T-02

Fake tokens

Counterfeit contracts wearing real tickers, caught against the official registry on every chain.

Auto-hidden
T-03

Address poisoning

Look-alike addresses that copy the first and last characters of your saved contacts.

Warned
T-04

Honeypots

Active freeze authorities and 90%+ holder concentration — tokens you can buy but never sell.

Flagged
T-05

Unlimited approvals

approve(maxUint256) requests get their own warning and a deliberate hold-to-confirm.

Hold to sign
T-06

Permit2 traps

Off-chain signatures that can drain you later — surfaced loudly, never "just a signature".

Surfaced
T-07

Sanctioned addresses

OFAC, EU and UN lists screened via the Chainalysis on-chain oracle before any transfer.

Blocked
T-08

Dust & bait

Spam blasts and approval-bait tokens swept into a Suspicious folder with no value shown.

Auto-hidden
The signals behind it

Four sources.
One verdict.

Chainalysis Oracle

On-chain sanctions screening against OFAC, EU and UN lists — checked on every counterparty.

Sanctions

GoPlus reputation

Live reputation data on addresses and contracts — known scammers and mixers get flagged instantly.

Reputation

Official registry

Token contracts verified against the official registry on 14 EVM chains + Solana. Fakes never pass.

Authenticity

Claude AI

An AI agent reads the full context of each transaction and explains the risk in plain language.

Powered by Claude
Go deeper

Guardian,
page by page.

How it worksThree layers of analysis, one verdict — in under 800 ms.→ Incoming ScannerThe only wallet that checks what arrives. Seven checks per transfer.→ Outgoing ProtectionCalldata decoded, drainers flagged, holds required — before you sign.→ Threat CatalogFake tokens, poisoning, honeypots, drainers — every trap, explained.→ Meet NoxieThe friendly face of Guardian — and your on-demand AI scanner.→
NOX NOX NOX
Free · Always on · Zero config

Get a wallet that
watches your back.

Create your Nox wallet in 60 seconds — Guardian is on from the very first transaction.

Create wallet — Free Explore the wallet