SCAN / IS YOUR PUBLIC KEY ALREADY OUT THERE?

Fresh, or exposed?

An address only reveals its ECDSA public key when a signature from it lands on-chain. Receiving funds never does. Sending a transaction does. So do things most people forget: a Permit2 transfer someone else submitted, an ERC-2612 permit, an EIP-7702 delegation. Paste addresses and find out.

Addresses

Read-only. Nothing is signed, nothing leaves your browser except RPC reads.

One or more 0x addressesChecks: nonce · EIP-7702 code · Permit2 nonce bitmap · ERC-2612 nonces on USDC, DAI, UNI, USDe, AAVE, stETH, wstETH, rETH, ENS.

What to do with an exposed address. Don't panic-migrate. When you do move, move once: an exposed key signing one more transaction into a hash-only vault changes nothing about its past and everything about its future. Fund the vault address first, confirm with dust, then send the rest. Fresh addresses stay fresh only until they sign: spend from them straight into a vault, not into another EOA.