ZeroDust Chain Exit
WarnAudited by ClawScan on May 10, 2026.
Overview
This skill openly helps empty crypto wallets, but it asks users to sign powerful EIP-7702 delegations through an external service whose source and contract details are not visible here.
Install only if you intentionally want an agent-assisted crypto wallet sweep. Verify the ZeroDust service, contract addresses, wallet prompts, destination address, fees, and revocation before signing anything, and avoid batch sweeps or large balances until you have independently established trust.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
If the user signs the wrong authorization, verifies the wrong destination, or trusts a compromised service, their native token balance could be moved irreversibly.
The skill asks the user to grant delegated wallet authority and authorize a sweep that is designed to empty the wallet's native-token balance. This is core to the purpose, but it is high-impact financial authority and the provided artifacts do not show contract-address or audit verification guidance.
The user must sign: 1. **EIP-7702 delegation authorization** - Delegates their EOA to ZeroDust contract ... 3. **EIP-712 sweep intent** - Authorizes the specific sweep parameters
Only sign after independently verifying the destination, chain, amount, fees, contract address, and revocation details in the wallet. Prefer a hardware wallet or test wallet and do not sign unreadable or unexpected EIP-7702 data.
Users cannot verify from these artifacts that the backend or contract will produce only the intended sweep and revocation transactions.
The package provides instructions but no inspectable implementation, while the skill relies on a remote ZeroDust backend to create quotes and signing payloads. For a crypto sweep workflow, unknown source/provenance is a material review concern.
Source: unknown Homepage: none No code files present — this is an instruction-only skill.
Before use, verify the provider, API documentation, contract addresses, source code, and any audits outside the skill package. Avoid using it with significant funds unless the service provenance is trusted.
A mistaken batch request could prepare or submit sweeps for more chains than intended.
Batch sweeping is disclosed and purpose-aligned, but it can affect multiple chain balances at once if the agent or user supplies the wrong chain or destination parameters.
## Batch Sweeps (Multiple Chains) Sweep from multiple chains in one request:
Require a per-chain quote and explicit user confirmation of source chain, destination address, expected receive amount, and fees before any signing or submission.