Drain alerts for bot and agent wallets (waitlist)

What it would watch

• Funds leaving in a sweep. Most of a wallet's balance, or several tokens one after another, going to the same new address in a short time. That is what a drainer does once it has a key.
• Tiny test transfers. A small amount sent out first, to check that a stolen key works, before the real sweep.
• New token approvals to unknown contracts (Ethereum, Base, Arbitrum, BNB Chain). An approval lets a contract move your tokens later without asking you again.
• New EIP-7702 delegations to unknown contracts (same chains). A delegation points your wallet at a contract's code, which can then act as your wallet (EIP-7702).
• Solana token-account authority changes. If the owner of one of your token accounts is changed to another address, that address controls those tokens.
• Address poisoning. A tiny or zero-value transfer from an address that looks like one you use, so you copy the wrong one from your history next time.
• Cross-wallet warnings. If several wallets that use the same bot are being drained at the same time, everyone on the list who uses that bot hears about it, even before their own wallet is touched.
• A daily exposure scan. Once a day, the open token approvals and delegations on your wallets, each with a Revoke.cash link so you can remove the ones you don't need.

What it can and can't do

The honest limit: if a thief already has your private key, an alert can't stop the sweep. The transfers are signed with your key and final once they're onchain. Nothing we send you can undo them.

Where an alert can still help:

• Catching setup steps early. Test transfers, new approvals and new delegations can come before the main theft. Seeing them gives you a chance to revoke or move funds first.
• Protecting your other wallets. If one wallet is hit, you hear about it fast and can empty the wallets that share the same bot, seed phrase or device.
• Early warnings across the platform. When wallets that use the same bot are drained at once, you can pull funds out before your own wallet is reached.

It would not hold or ask for keys, sign or block transactions, catch every drain, or get stolen money back.

Privacy

• Public addresses only. Alerts would work from public wallet addresses, the same data anyone can see in a block explorer. Never send a private key or seed phrase to anyone, including us. We will never ask for one.
• What the waitlist stores. Your email, the chains, bots and number of wallets you pick, the price you pick, the page you came from, your country (from Vercel's request headers) and the time. It is kept in our Upstash Redis database and a copy is emailed to us through Resend. We don't ask for wallet addresses on the waitlist.
• What it's used for. To email you once when drain alerts are ready and to decide whether and how to build them. Ask hello@tradingagentstack.com to remove your entry.
• On Telegram, /alerts stores your chat id only, so the bot can message you once when it's ready.

Join the waitlist

A few quick questions. Your answers tell us which chains and bots to support first and what it should cost.

Prefer Telegram? Message @TASCheckBot with /alerts. It replies with what's planned and messages you once when it's ready.

What you can do today

• Check a bot, exchange or wallet before you connect it on TAS Check: is the link official, who holds the key, what's the worst case.
• Keep only trading money in any wallet a bot can touch, and keep long-term holdings in a separate wallet.
• Review and revoke token approvals you don't use with Revoke.cash.
• Running an AI agent with an EVM wallet? TAS Guard's onchain mode adds spending limits and approval from your phone before a transaction is sent.
• Already drained? Follow what to do if a bot or wallet is drained.