# algofather

> Practical security on exploits, detection, and defense

Algofather (https://algofather.com) helps crypto teams and individuals with threat research, incident response, brand and UI protection against phishing clones, plus practical tools: wallet address screening, stolen-crypto triage, and a scam/phish tip line. The curated Security Index reviews selected token contracts for defenders.

## Business

- [Threat research](https://algofather.com/business/threat-research) - active attack patterns, drainers, fake frontends, indicators for security teams
- [Incident response](https://algofather.com/business/incident-response) - live breach or drain triage, timelines, evidence packs
- [Brand & UI protection](https://algofather.com/business/brand-protection) - lookalike domains, clone dApps, social impersonation, takedown evidence

## Individuals

- [Wallet check](https://algofather.com/individuals/wallet-check) - composite 0-100 address risk score (informational)
- [Stolen crypto](https://algofather.com/individuals/stolen-crypto) - triage after phishing or drains; no recovery guarantee; never asks for seed phrases
- [Report scam / phish](https://algofather.com/individuals/report) - tip line for fake sites, contracts, and malicious addresses

## Security Index

- [Security Index](https://algofather.com/security-index) - curated invite-in contract reviews (not a market-cap dump)
- [USDT — Tether](https://algofather.com/security-index/tether) (sec 71)
- [BNB — BNB](https://algofather.com/security-index/binancecoin) (sec 70)
- [USDC — USDC](https://algofather.com/security-index/usd-coin) (sec 74)
- [WBTC — Wrapped Bitcoin](https://algofather.com/security-index/wrapped-bitcoin) (sec 66)
- [WETH — WETH](https://algofather.com/security-index/weth) (sec 84)
- [LINK — Chainlink](https://algofather.com/security-index/chainlink) (sec 60)
- [DAI — Dai](https://algofather.com/security-index/dai) (sec 76)
- [UNI — Uniswap](https://algofather.com/security-index/uniswap) (sec 66)
- [AVAX — Avalanche](https://algofather.com/security-index/avalanche-2) (sec 70)
- [AAVE — Aave](https://algofather.com/security-index/aave) (sec 72)
- [PEPE — Pepe](https://algofather.com/security-index/pepe) (sec 54)
- [INJ — Injective](https://algofather.com/security-index/injective-protocol) (sec 60)

## Research (Insight)

- [Insight](https://algofather.com/insight) - security write-ups and research notes
- [Crypto Stealer Malware: Wallet Theft, Detection & Prevention](https://algofather.com/insight/crypto-stealer-malware-wallet-theft)
- [Permission to Lose Assets](https://algofather.com/insight/permission-to-lose-assets-context-bound-authorization)
- [AI as an attacker accelerator in crypto](https://algofather.com/insight/ai-as-attacker-accelerator-crypto)
- [TON without Permit - TonConnect, WalletConnect, and the trust gap](https://algofather.com/insight/ton-without-permit-tonconnect-walletconnect)
- [Crypto drainers lab note: approvals, chain differences, revoke, simulation](https://algofather.com/insight/crypto-drainers-approvals-simulation)
- [XMRig intrusion lab: entry paths, persistence, and hunts that work](https://algofather.com/insight/xmrig-miners-intrusion-detection)
- [JWT in the lab: structure, verification, and the bugs that keep shipping](https://algofather.com/insight/jwt-tokens-explained)
- [PHP2Shell lab note: CVE-2026-109618 / 109619 engine RCE](https://algofather.com/insight/php2shell-cve-2026-rce)

## Company

- [Company](https://algofather.com/company)
- [Contacts](https://algofather.com/contacts) - contact@algofather.com
- [Request call](https://algofather.com/request-call) - scoping for teams

## Optional

- [Sitemap](https://algofather.com/sitemap.xml)
- [Terms](https://algofather.com/terms)
- [Privacy](https://algofather.com/privacy)