Web3 Antivirus, the on-chain contract scanner, has now analyzed 100.8 million contracts and flagged 4.24 million of them as malicious. The bulk of the damage is recent: 3.41 million of those scam flags landed in the last 30 days alone, an average of more than 110,000 new flagged contracts per day.
Why it matters
The cadence matters more than the cumulative count. A scam contract that looked ordinary until the moment a user approved, signed, or connected a wallet is the dominant shape of retail-side crypto fraud in 2026, and the flagged-contract flow now looks closer to an industrialised operation than a series of opportunistic phishing drops. Approvals, not raw transfers, are the threat surface, and most wallet UIs still surface them as a single confirmation click.
Market impact
The platform surfaces toxic-token scores, suspicious-address flags, and approval-history inspection at dash.web3antivirus.io. For users, the practical takeaway is to revoke stale approvals after any interaction with an unfamiliar contract, and to route every new approval through a fresh burner wallet rather than the main treasury address. The broader signal for the sector is that contract-level fraud has outpaced token-level fraud in volume, which puts the security burden back on wallet UX rather than on-chain analytics.
Frequently asked questions
-
How many scam contracts has Web3 Antivirus flagged in total?
Web3 Antivirus has analyzed 100.8 million contracts and flagged 4.24 million of them as malicious, including 3.41 million flagged in the last 30 days.
-
How fast are new scam contracts appearing?
Roughly 110,000 newly flagged contracts per day on average across the last 30 days, a pace that reads as industrialised fraud rather than opportunistic phishing.
-
Why are approvals the real threat surface?
A malicious contract usually looks ordinary until a user approves, signs, or connects a wallet. Most wallet UIs surface that approval as a single click, which is what lets drainers execute.
-
What can users do to reduce wallet-drain risk?
Revoke stale approvals after any interaction with an unfamiliar contract, route new approvals through a fresh burner wallet, and inspect toxic-token scores and approval history before signing.
-
Is contract-level fraud now bigger than token-level fraud?
By flagged volume, yes. The flagged-contract flow has outpaced token-level fraud, which shifts the security burden back onto wallet UX rather than on-chain analytics.
CoinTelegraph