MiniAppShield

About MiniAppShield

MiniAppShield is a free Telegram security scanner that analyzes Telegram Mini Apps, TON dApps, and crypto bots for security risks before you connect your wallet or share sensitive data. Recent security research found critical vulnerabilities in 81% of tested popular Telegram Mini Apps - including cases where wallet recovery phrases, seed phrases, and session tokens were sent to external servers in plain, readable text. MiniAppShield goes beyond surface-level URL or blacklist checks. It performs real code analysis, including: - Seed phrase and private key exfiltration detection through data-flow analysis - Fake wallet connect detection - identifies forms that mimic TON Connect without using the real protocol - Brand impersonation detection for popular TON wallets, DEXs, and crypto projects - Domain age and infrastructure analysis (RDAP/WHOIS) - TON transaction request detection and address extraction - Cross-app infrastructure correlation - flags wallet addresses and JavaScript code shared across multiple scanned Mini Apps, helping surface coordinated scam campaigns - Telegram API permission analysis (location, contacts, payments, clipboard access) - Optional Deep Scan mode: launches the Mini App in a real headless browser with an authenticated Telegram WebView session to observe actual network requests, wallet interactions, and stored data in real time - not just static code Built for the TON ecosystem, Telegram crypto bots, airdrop projects, tap-to-earn games, NFT marketplaces, and Web3 Mini Apps. No wallet connection required to use the scanner. No signup, no fees. Available in 8 languages: English, Russian, Indonesian, Turkish, Portuguese, Spanish, Persian, and Ukrainian. Security researchers, crypto traders, airdrop hunters, and everyday Telegram users can check any Mini App before risking their funds. Just send any Mini App's username to @MiniAppShield_bot and get an instant security report with clear risk levels: Low Risk, Caution, High Risk, or Critical - backed by evidence, not guesswork.

Questions