Skip to content

Add 8004scan URLs and ERC-8004 spec links#56

Open
mefai-dev wants to merge 24 commits intobnb-chain:mainfrom
mefai-dev:fix/add-8004scan-urls
Open

Add 8004scan URLs and ERC-8004 spec links#56
mefai-dev wants to merge 24 commits intobnb-chain:mainfrom
mefai-dev:fix/add-8004scan-urls

Conversation

@mefai-dev
Copy link

Summary

  • 8004scan referenced without URLs

Type of Change

  • Documentation improvement

Changes Made

  • Added 8004scan.com link, ERC-8004 spec link

Testing

  • Links verified

mefai-dev and others added 24 commits March 9, 2026 00:12
- Professional README with architecture docs and API reference
- Self-contained FastAPI backend (api/)
- Vanilla JS frontend with 50 Web Components (frontend/)
- Contribution guide and code ownership
- Updated bnbchain-mcp-skill references

Built by Mefai for the BNB Chain community.
Skills:
- honeypot-check: Combined honeypot detection with bytecode analysis, buy/sell ratio, and owner concentration scoring
- contract-xray: Deep bytecode analysis with proxy detection, function scanning, and mint/pause/blacklist pattern recognition
- approval-scanner: Token approval checker across 9 major DEX routers with unlimited allowance detection
- risk-radar: Multi-signal risk scoring (0-100, A-F grade) combining on-chain and market data
- upgrade-monitor: EIP-1967 proxy contract detection with implementation and admin storage slot inspection
- contract-audit: Smart contract security analysis covering ownership, proxy patterns, and token standards compliance

All skills use live BSC JSON-RPC data and DexScreener market feeds.
Each includes full API documentation with example requests and response schemas.
Skills:
- sniper-detector: Detect bot sniping on any token by analyzing early block buyers, hold/dump tracking, and snipe score (0-100)
- copy-trade: Real-time alpha wallet activity monitor tracking known wallets for token interactions across recent blocks
- smart-money: Whale transaction tracker identifying large-value BNB transfers with wallet labeling and direction classification
- wallet-cluster: On-chain forensics tool discovering connected wallets via BNB transfer patterns and shared token holdings

All skills use live BSC JSON-RPC data with block scanning and receipt analysis.
Each includes full API documentation with example requests and response schemas.
Skills:
- dex-arb: Cross-DEX price discrepancy finder comparing prices across PancakeSwap, BiSwap, and other BSC DEXes with gas-adjusted profit estimates
- token-battle: Side-by-side comparison of up to 4 tokens showing price, volume, liquidity, burns, and 24h performance
- token-birth: Token genesis analysis with creator wallet profiling, supply distribution breakdown, and liquidity history tracking
- pair-analytics: Deep DEX pair analysis aggregating stats across multiple trading pairs for any BSC token
- pancakeswap-arena: PancakeSwap top pairs dashboard showing volume leaders, liquidity depth, and trending tokens

All skills use live DexScreener market data and BSC JSON-RPC.
Each includes full API documentation with example requests and response schemas.
Skills:
- tx-decoder: Decode any BSC transaction into human-readable function calls, event logs, and token transfers with gas breakdown
- block-autopsy: Block-level gas distribution analysis with transaction type breakdown and top gas consumer identification
- token-flow: Track real-time token transfer movements by scanning recent block receipts for Transfer events
- burn-tracker: Real-time BNB and token burn tracking with live USD valuations from DexScreener
- wallet-scanner: Complete wallet portfolio analysis showing BNB and top BSC token balances with current USD values
- portfolio-heatmap: Bloomberg-style portfolio heatmap with 24h performance coloring, health score, and concentration analysis

All skills use live BSC JSON-RPC data with block and receipt scanning.
Each includes full API documentation with example requests and response schemas.
Skills:
- validator-map: Live BSC validator monitoring tracking all 21 PoSA validators with gas utilization, block production stats, and MEV detection
- network-pulse: Network congestion gauge scoring pressure 0-100 with TPS measurement, block timing analysis, and gas optimization recommendations
- bsc-supremacy: BSC vs Ethereum head-to-head comparison using live data for block time, TPS, gas costs, and finality speed
- gas-calculator: Operation cost estimator computing gas costs for 10 common operations with BSC vs ETH savings comparison
- chain-vitals: Core network health dashboard showing block height, gas price, peer count, and sync status

All skills use live BSC JSON-RPC data with multi-block analysis.
Each includes full API documentation with example requests and response schemas.
Skills:
- yield-finder: APY estimation engine analyzing trading fee revenue across BSC DEX pairs to identify the highest yield opportunities
- defi-leaderboard: Top DeFi protocols ranked by total value locked, trading volume, and active user metrics
- liquidity-pulse: Real-time liquidity depth analysis across major BSC trading pairs with concentration and movement tracking

All skills use live DexScreener market data and BSC JSON-RPC.
Each includes full API documentation with example requests and response schemas.
feat: Add 6 BSC Security Analysis Skills
feat: Add 4 BSC Alpha Intelligence Skills
feat: Add 5 BSC Market Analysis Skills
feat: Add 6 BSC On-Chain Analytics Skills
feat: Add 5 BSC Network and Infrastructure Skills
feat: Add 3 BSC DeFi Analysis Skills
Portfolio snapshot via on-chain RPC — BNB balance plus top 15 BSC token
holdings with live prices and wallet activity classification.
Cross-chain capital flow analysis via bridge contract balances on BSC.
Monitors 6 major bridges: Stargate, Celer, Multichain, LayerZero,
Wormhole, and Axelar.
Real fee revenue vs TVL ranking for BSC DeFi protocols. Sources data
from DefiLlama to rank protocols by daily fees, revenue, and
capital efficiency ratio.
Composite BSC dominance score vs other L1/L2 chains. Weighs TVL (40%),
DEX volume (30%), fees (20%), and cost efficiency (10%) using DefiLlama
and BSC RPC data.
BNB staking ecosystem analysis — total staked BNB, liquid staking
protocol comparison (slisBNB, ankrBNB, BNBx, stkBNB, rBNB), and
APY benchmarks via on-chain data.
feat: add Bridge Flow Monitor skill (#70)
feat: add Protocol Revenue Leaderboard skill (#71)
feat: add Wallet PnL Tracker skill (#69)
feat: add Chain Dominance Index skill (#72)
feat: add Staking Intelligence skill (#73)
## Summary
- SKILL.md referenced "8004scan" without providing any URLs — useless for developers
- ERC-8004 specification was mentioned but never linked

## Type of Change
- [x] Documentation improvement

## Changes Made
- Added 8004scan.com link for registration verification
- Added ERC-8004 EIP specification link
- Clarified 8004scan mainnet vs testnet references

## Testing
- [x] Links verified as accessible
@hashdit-bot
Copy link

hashdit-bot bot commented Mar 14, 2026

Pull Request Review

This PR goes far beyond the title’s stated doc tweak: it introduces a large initial project scaffold including new backend FastAPI/cache modules, frontend dashboard files, many skill documentation files, and repository governance docs (e.g., CODEOWNERS, CONTRIBUTING). It also updates the existing MCP skill docs to include explicit 8004scan and EIP-8004 links and rephrased guidance around MCP config and prompts. Overall, this is effectively a substantial bootstrap/content expansion rather than a small documentation-only change.

Sensitive Content

Blockchain Address:

  • 0x0E09FaBB73Bd3Ade0a17ECC321fD13a19e81cE82 (Ethereum/BSC address) in multiple files (e.g., README.md, many skills/**/SKILL.md) — used in API examples
  • 0x55d398326f99059fF775485246999027B3197955 (Ethereum/BSC address) in skills/analytics/wallet-scanner/SKILL.md, skills/security/approval-scanner/SKILL.md, skills/security/upgrade-monitor/SKILL.md — used in examples
  • 0x10ED43C718714eb63d5aA57B78B54917c3e6fE49 (Ethereum/BSC address) in skills/analytics/block-autopsy/SKILL.md, skills/security/approval-scanner/SKILL.md, skills/analytics/tx-decoder/SKILL.md — router/example usage
  • Multiple additional concrete BSC/EVM contract/wallet addresses added across new skills/**/SKILL.md docs as sample values

Social Account:

  • @mefai-dev (GitHub handle) in .github/CODEOWNERS — repository ownership assignment

Security Issues

🟠 [HIGH] Overly permissive CORS configuration allows unrestricted cross-origin API access

File: api/main.py
The API enables allow_origins=["*"], allow_methods=["*"], and allow_headers=["*"], which permits any website to issue browser-based requests to this backend. For a public analytics API this may be intentional, but in practice this materially increases abuse surface (untrusted third-party embedding, automated scraping via browsers, and easier cross-origin invocation of any future sensitive endpoints).
Recommendation: Restrict CORS to explicit trusted origins, limit methods/headers to required ones, and separate public read-only routes from any future privileged routes with stricter policies.


Generated by Hashdit Bot. This tool can absolutely NOT replace manual audits.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant