Each site looks finished and works like the real thing. Each one hides a different threat in the transaction it builds. Press its main button and see what Baret checks before anything is signed.
These sites are simulations built for this showcase. They run on Monad testnet, where tokens have no value.
Every scenario on this page.
Paid API
A paid answer service that charges a small USDC payment per answer over x402. Nothing here is malicious. The question is what stops an agent that keeps asking.
Watch for
Exchange
A clean swap page. In the attack version, "enable trading" is an unlimited dUSDC allowance to a look-alike router that can empty your balance.
Watch for
NFT mint
A clean mint page for a generative collection. In the attack version, the mint button mints nothing. It gives a stranger access to every piece you hold in the collection.
Watch for
Staking
A staking page that pays a receipt token for every MON you stake. In the attack version, the deposit goes to a pool nobody vouches for, and no receipt comes back.
Watch for
Airdrop
An airdrop page with a countdown and an eligibility check. In the attack version, the claim button asks for an unlimited allowance that lets a stranger take your USDC.
Watch for
Token sale
A polished token sale with a countdown and a tokenomics chart. In the attack version, your tokens still arrive, but the sale runs code its deployer can replace after you pay.
Watch for
Baret or any wallet in the picker. The sites run on Monad testnet, where tokens have no value.
On NovaSwap the attack's request can go two ways. Sign with your wallet sends it straight to the wallet you use today; sign both steps and the dUSDC leaves. The site's own button sends the same request through Baret's check first, and it is stopped before anything is signed. Check with Baret sends it to the Baret wallet, which calls the same check and refuses it in its own window. No wallet is singled out here. Baret is a check any wallet can call before it signs.
| A wallet with no pre-sign check | With Baret's check | |
|---|---|---|
| The NovaSwap attack | Two requests to sign. The second takes the whole dUSDC balance to the look-alike. | Stopped at the first request: an unlimited allowance to a reported spender. Nothing is signed. |
| What you see | A contract address, an amount and a confirm button. | What changes in your balances, and one sentence per finding. |
| An unlimited allowance | Shown like any other allowance. | Named as unlimited, and stopped when your rules block it. |
| A look-alike router or pool | The page is all you have to go on. | Checked against the reputation registry and the contracts Baret knows. |
| A check that cannot finish | There was no check to finish. | Can't reach Baret. It counts as Blocked and nothing is signed. |
Each site builds a real transaction on Monad testnet. The analysis appears before anything is signed.
