# 哆啦A梦的百宝箱 · Doraemon Toolbox > AI 助力的百宝工具集 — 涵盖美股、预测市场、永续、Meme、Agent 等方向的实用工具。 > Canonical site: https://manyaitool.com > Updated: 2026-06-29 ## AI-Readable Files - [Full llms file](https://manyaitool.com/llms-full.txt) - [AI index JSON](https://manyaitool.com/ai-index.json) - [Schema JSON](https://manyaitool.com/schema.json) - [Sitemap](https://manyaitool.com/sitemap.xml) ## Core Pages - [Home](https://manyaitool.com) - [Simplified Chinese home](https://manyaitool.com/zh-hans) - [Traditional Chinese home](https://manyaitool.com/zh-hant) - [About](https://manyaitool.com/about) - [md](https://manyaitool.com/about/index.md) - [Work with me](https://manyaitool.com/work-with-me) - [md](https://manyaitool.com/work-with-me/index.md) - [AI agent development](https://manyaitool.com/ai-agent-development) - [md](https://manyaitool.com/ai-agent-development/index.md) - [Web3 tools development](https://manyaitool.com/web3-tools-development) - [md](https://manyaitool.com/web3-tools-development/index.md) - [Case studies](https://manyaitool.com/case-studies) - [md](https://manyaitool.com/case-studies/index.md) ## Product Pages - [PolyBall — Football Markets](https://manyaitool.com/products/polyball) - [md](https://manyaitool.com/products/polyball/index.md): Pulls scattered Polymarket football markets, on-chain whale moves and match data into one decision-ready tool. - [PolyWeather](https://manyaitool.com/products/polyweather) - [md](https://manyaitool.com/products/polyweather/index.md): Ensemble forecasts from 40 weather models to spot mispriced Polymarket weather markets. - [PolyMix](https://manyaitool.com/products/polymix) - [md](https://manyaitool.com/products/polymix/index.md): Multi-platform odds comparison for NBA prediction markets across Polymarket, Kalshi and five major books. - [PolyWhale](https://manyaitool.com/products/polywhale) - [md](https://manyaitool.com/products/polywhale/index.md): Whale detection across Polymarket and Kalshi — whale profiles, whale sentiment and top markets. - [PolyNFL](https://manyaitool.com/products/polynfl) - [md](https://manyaitool.com/products/polynfl/index.md): One-stop NFL prediction-market analysis: game overview, weather impact, ESPN/Polymarket odds and live data. - [PolyNBA](https://manyaitool.com/products/polyarena) - [md](https://manyaitool.com/products/polyarena/index.md): Aggregates Polymarket NBA markets with ESPN data — recent form, H2H, scoring trends and volume, all on one page. - [PolyLastChance](https://manyaitool.com/products/polylastchance) - [md](https://manyaitool.com/products/polylastchance/index.md): An end-of-session monitor with live prices and opportunity alerts to cash in on last-chance plays. - [PolySeer](https://manyaitool.com/products/polyseer) - [md](https://manyaitool.com/products/polyseer/index.md): A deep AI tool for prediction markets. - [PolySurge](https://manyaitool.com/products/polysurge) - [md](https://manyaitool.com/products/polysurge/index.md): Real-time anomaly signals across 100 high-liquidity Polymarket markets — catch moves first. - [ProofRank — Hyperliquid Vault Check](https://manyaitool.com/products/proofrank) - [md](https://manyaitool.com/products/proofrank/index.md): Check Hyperliquid vaults before you copy them: real APR, drawdown, recent PnL and risk verdicts translated into plain language. - [PerpOIRadar](https://manyaitool.com/products/perpoiradar) - [md](https://manyaitool.com/products/perpoiradar/index.md): Tracks open-interest (OI) changes across exchanges in real time. - [PerpFunding](https://manyaitool.com/products/perpfunding) - [md](https://manyaitool.com/products/perpfunding/index.md): A cross-exchange perpetual funding-rate radar — a tool for steady funding-rate arbitrage. - [HyperSmart](https://manyaitool.com/products/hypersmart) - [md](https://manyaitool.com/products/hypersmart/index.md): Before you copy a trader, backtest them on historical data to see the real returns. - [duola Funding Agent](https://manyaitool.com/products/funding-agent) - [md](https://manyaitool.com/products/funding-agent/index.md): A Telegram-first funding-rate agent that watches opportunities, filters traps, recalculates by capital size and keeps tracking after you click Track. - [Solana Alpha Tracker](https://manyaitool.com/products/solana-alpha-tracker) - [md](https://manyaitool.com/products/solana-alpha-tracker/index.md): An MCP that watches top Solana wallets for you — 38 built-in smart-money traders, entry-quality scoring and cluster signals, so you just ask Claude 'should I copy this trade?' - [Airdrop Hunter](https://manyaitool.com/products/airdrop-hunter) - [md](https://manyaitool.com/products/airdrop-hunter/index.md): Multi-wallet airdrop scanner with sybil radar — sweep a batch of wallets across 12 high-value points/rewards projects in one query; hits, misses, claim status and sybil risk at once. - [Pendle MCP](https://manyaitool.com/products/pendle-mcp) - [md](https://manyaitool.com/products/pendle-mcp/index.md): An MCP for DeFi's biggest yield market — scan 700+ PT fixed-yield markets across 10 chains, PT leverage loops with precise liquidation bounds, and Boros funding-rate spreads. - [Wallet Radar](https://manyaitool.com/products/walletradar) - [md](https://manyaitool.com/products/walletradar/index.md): A durable multi-wallet MCP — a 5–200 address watchlist with cross-protocol liquidation monitoring (Aave/Compound/Morpho/Spark) and price-impact simulation, remembered across sessions. - [Token Xray](https://manyaitool.com/products/token-xray) - [md](https://manyaitool.com/products/token-xray/index.md): An agent-native token safety MCP — fuses contract, deployer reputation, LP-lock authenticity and bridged-fund detection into one green/yellow/red verdict; catches serial ruggers others miss. - [Funding Arb Scanner](https://manyaitool.com/products/funding-arb-scanner) - [md](https://manyaitool.com/products/funding-arb-scanner/index.md): The first funding-arb MCP that computes NET returns — across 9 exchanges it subtracts taker fees to give you net USD and break-even hours, not just the raw spread. - [MemeCat](https://manyaitool.com/products/zaogengmao) - [md](https://manyaitool.com/products/zaogengmao/index.md): Paste a tweet and AI generates the meme coin's name, ticker and logo — and tells you why it could pop. - [On-Chain Destiny Bureau](https://manyaitool.com/products/destiny-bureau) - [md](https://manyaitool.com/products/destiny-bureau/index.md): A daily reading so you never choose wrong — on-chain mysticism, 'scientific' fortune-telling. - [DuoLaSafe — Web3 Security Audits & Forensics](https://manyaitool.com/products/duolasafe) - [md](https://manyaitool.com/products/duolasafe/index.md): Smart-contract audits, on-chain forensics and asset-recovery support — every report public, PoC-backed, with an adversarial ruled-out section. - [Stolen-Fund Tracer — where did the money go?](https://manyaitool.com/products/safecheck-trace) - [md](https://manyaitool.com/products/safecheck-trace/index.md): Paste a hacked address and trace the funds hop by hop. Our in-house intel DB labels every hop — and pinpoints when the loot lands in an exchange deposit address (a freezable endpoint) or hits a mixer (trace breakpoint). The first concrete step toward recovery, free. - [Wallet Approval Checkup — who can drain you?](https://manyaitool.com/products/safecheck-approvals) - [md](https://manyaitool.com/products/safecheck-approvals/index.md): Most thefts trace back to one forgotten approval. Scan a wallet (read-only) for every live token approval and flag the unlimited ones — plus whether the spender is a known drainer / malicious contract, cross-checked against DuoLaSafe's intel DB and a multi-source risk engine. The part Revoke.cash won't tell you. - [Token X-ray — honeypot & rug deep check](https://manyaitool.com/products/safecheck-xray) - [md](https://manyaitool.com/products/safecheck-xray/index.md): Paste any token contract for a real on-chain check: honeypot buy/sell simulation, taxes, mint/freeze powers, proxy upgradability — plus deployer reputation against DuoLaSafe's intel DB (the serial-rugger signal generic scanners miss). Green / yellow / red at a glance; known stablecoins won't false-positive. - [Is this real USDT? — Stablecoin authenticity check](https://manyaitool.com/products/safecheck-token) - [md](https://manyaitool.com/products/safecheck-token/index.md): Paste any token contract and check it against an all-chain official-stablecoin registry plus our in-house fake-stablecoin blacklist. Address matches official = real; matches our blacklist = scam. Catches counterfeit USDT/USDC — especially on TRON, where most fakes live. Nobody else fuses official-address registry + honeypot + scam intel into one verdict. - [Wallet drained? — Free self-rescue triage wizard](https://manyaitool.com/products/safecheck-sos) - [md](https://manyaitool.com/products/safecheck-sos/index.md): A free triage wizard for theft victims: it works out how you were hit, gives prioritized stop-the-bleed steps, flags the attacker address against our intel DB, and auto-generates pre-filled IC3 / Chainabuse / police / exchange-freeze reports. Read-only, Chinese-first, and it never asks for your seed phrase — unlike the recovery scams that prey on victims. - [Is this a phishing site? — Domain check + free API](https://manyaitool.com/products/safecheck-phishing) - [md](https://manyaitool.com/products/safecheck-phishing/index.md): Check any domain against DuoLaSafe's 820k+ phishing & malicious domains, with parent-domain matching. Free, real-time, open API with no key — wallets and dApps can plug in directly. Undercuts the $999/mo, deliberately delayed commercial blacklists. - [Polymarket $2.9M fund-tracking investigation](https://manyaitool.com/products/polymarket) - [md](https://manyaitool.com/products/polymarket/index.md): A frontend supply-chain attack drained ~$2.9M from 11 users. The press said the funds still sit in the consolidation wallet — we traced the chain: already moved, split and idle across 3 wallets, plus the address-poisoning targeting the loot. A verifiable, dated on-chain snapshot. - [Verus bridge $11.58M post-mortem](https://manyaitool.com/products/verus-bridge) - [md](https://manyaitool.com/products/verus-bridge/index.md): The bridge's submitImports never enforced cross-chain amount conservation; $11.58M drained, swapped to 5,402 ETH. A full 7-section root-cause + attack-tx breakdown with fund tracing: reported as "funds unmoved," yet on-chain the loot split out (4,052+1,350 ETH) just 3 days later and the wallet was empty by Jun 27. - [Humanity Protocol $36M analysis](https://manyaitool.com/products/humanity-protocol) - [md](https://manyaitool.com/products/humanity-protocol/index.md): Not a contract bug — a fake multisig: the 7 keys controlling the token and bridge were all backed up on one developer's laptop, and a single Bithumb-spoofing phishing email took the lot, moving ~447M $H across ETH/BSC. A 7-section root-cause + attack-flow breakdown; Quantstamp attributes it to DPRK. - [Bybit $1.5B — the largest hack ever](https://manyaitool.com/products/bybit) - [md](https://manyaitool.com/products/bybit/index.md): Lazarus tampered Safe{Wallet}'s frontend JS, swapping a cold-wallet transfer for a DELEGATECALL that replaced the implementation and drained the vault. We verified on-chain that the Safe's slot0 still points to the malicious contract. A 7-section breakdown. - [KelpDAO $292M bridge hack](https://manyaitool.com/products/kelpdao) - [md](https://manyaitool.com/products/kelpdao/index.md): A 1-of-1 LayerZero DVN was poisoned via compromised RPC nodes + DDoS failover, forging a phantom source-chain burn to mint 116,500 unbacked rsETH. We verified the mint tx, GUID, Tornado funding and Arbitrum freeze. Attributed to Lazarus. - [Drift $285M access-control takeover](https://manyaitool.com/products/drift) - [md](https://manyaitool.com/products/drift/index.md): Not a contract bug: attackers spent 6 months social-engineering into the Security Council via a fake trading firm, weaponizing Solana durable nonces to pre-sign admin transfers and drain vaults with fake collateral. Attributed to DPRK. - [Resolv $25M KMS key compromise](https://manyaitool.com/products/resolv) - [md](https://manyaitool.com/products/resolv/index.md): Resolv's AWS KMS signing key was compromised, minting 80M unbacked USR from ~$100K USDC via two completeSwap calls and cashing out ~11K ETH. Root cause: a single off-chain key plus no on-chain mint cap. On-chain verified. - [Truebit $26.2M integer overflow](https://manyaitool.com/products/truebit) - [md](https://manyaitool.com/products/truebit/index.md): A legacy purchase contract (Solidity 0.6.10, no overflow checks) overflowed its pricing math; a huge input wrapped the price to ~0, letting the attacker mint TRU for free and drain 8,535 ETH in one tx. Attack tx and overflow math both verified on-chain. - [Moonwell oracle misconfiguration](https://manyaitool.com/products/moonwell-oracle-misconfiguration) - [md](https://manyaitool.com/products/moonwell-oracle-misconfiguration/index.md): An oracle update dropped the ETH/USD leg of cbETH pricing, mispricing cbETH at ~$1.12 vs ~$2,200; liquidators seized 1,096 cbETH for ~$1 each, leaving ~$1.78M bad debt. One missing price leg = real money. - [Cetus $220M AMM overflow](https://manyaitool.com/products/cetus) - [md](https://manyaitool.com/products/cetus/index.md): Sui's largest AMM: a wrong overflow mask in checked_shlw (0xffff…<<192 vs 1<<192) let a u256 left-shift silently truncate, minting ~1.03e34 liquidity for ~1 token to drain reserves. ~$220M lost; ~$162M frozen by validators and returned via governance. - [GMX V1 $42M reentrancy](https://manyaitool.com/products/gmx-v1) - [md](https://manyaitool.com/products/gmx-v1/index.md): Arbitrum perp DEX: a reentrancy via the executeDecreaseOrder callback skipped the globalShortAveragePrices update, crushing BTC short avg price and inflating GLP for profitable redemptions. Attack tx verified on-chain; all funds returned, $5M white-hat bounty. - [Rhea Finance $18.4M slippage-check flaw](https://manyaitool.com/products/rhea-finance) - [md](https://manyaitool.com/products/rhea-finance/index.md): NEAR's top DeFi. Early labeled oracle manipulation, the real cause was a Burrowland margin slippage-check that summed per-hop min-outputs across a crafted route while settling actuals with no re-check. Loss revised $7.6M→$18.4M; ~$11.2M returned/frozen. - [Aperture Finance $3.67M arbitrary call](https://manyaitool.com/products/aperture-finance) - [md](https://manyaitool.com/products/aperture-finance/index.md): An arbitrary-call flaw in the V3/V4 executor: the custom-swap function (selector 0x1d33) left call target/calldata unvalidated, letting the attacker craft transferFrom via the victim's pre-existing approvals and drain 36.9 WBTC. Main tx verified; ~$2.4M to Tornado. - [Foom Cash $2.3M zk-verifier flaw](https://manyaitool.com/products/foom-cash) - [md](https://manyaitool.com/products/foom-cash/index.md): zk-SNARK privacy protocol: a skipped Phase-2 trusted-setup randomization left Groth16 gamma==delta, collapsing the pairing check to 1=1 so forged proofs passed without a witness. ~$2.26M drained across ETH+Base; ~$1.84M recovered by white hats. - [Venus user $13.5M phishing blind-sign](https://manyaitool.com/products/venus-user) - [md](https://manyaitool.com/products/venus-user/index.md): A power user was phished via a fake Zoom client and a tampered wallet extension, blind-signing an updateDelegate that handed account-delegate rights to the attacker — ~$13.5M drained. The contract held; the signature didn't. Governance force-liquidated; funds fully recovered in 12h. - [Aztec deprecated bridge $2.16M forged proof](https://manyaitool.com/products/aztec-deprecated-bridge) - [md](https://manyaitool.com/products/aztec-deprecated-bridge/index.md): A deprecated, immutable, abandoned RollupProcessor bridge: its escapeHatch had no access control and proofs weren't bound to fund ownership, so a forged proof drained ~1,158 ETH + 150k DAI in one tx. Tx and the now-empty victim contract verified on-chain. - [Base fake-stablecoin scan: 70 fake PYUSD](https://manyaitool.com/products/base-fake-stablecoin-scan-70-fake-pyusd) - [md](https://manyaitool.com/products/base-fake-stablecoin-scan-70-fake-pyusd/index.md): Our in-house scanner flagged 70 fake stablecoins on Base impersonating PYUSD/FDUSD in a single pass: most with fake decimals (18 vs real PYUSD's 6) and very few holders — phishing-scam bait. All catalogued for lookup. Original first-party data. - [Twyne v1 leveraged-lending audit](https://manyaitool.com/products/twyne-v1-leveraged-lending-audit) - [md](https://manyaitool.com/products/twyne-v1-leveraged-lending-audit/index.md): Full audit of a leveraged-lending protocol on Euler EVC/EVK: manual review of 11 contracts + Slither + Foundry fuzz, adversarially verifying and refuting 6 potential attack surfaces. Report includes a "ruled-out attacks" section. - [Silo V3 isolated-lending audit](https://manyaitool.com/products/silo-v3-isolated-lending-audit) - [md](https://manyaitool.com/products/silo-v3-isolated-lending-audit/index.md): Manual + adversarial verification of the core silo-core: 0 highs, 7 candidate attack surfaces ruled out one by one, report public and verifiable. - [ThunderLoan flash-loan audit (First Flight)](https://manyaitool.com/products/thunderloan-flash-loan-audit) - [md](https://manyaitool.com/products/thunderloan-flash-loan-audit/index.md): Audited the CodeHawks ThunderLoan flash-loan protocol; 3 Highs all PoC-proven: deposit() corrupts the exchange rate (redeem more than deposited, draining LPs), an upgrade storage-slot collision silently rewrites the fee, and a manipulable spot oracle enables zero-fee flash loans. - [BriVault betting-vault audit (First Flight)](https://manyaitool.com/products/brivault-betting-vault-audit) - [md](https://manyaitool.com/products/brivault-betting-vault-audit/index.md): Audited the CodeHawks BriVault ERC4626 betting vault; 2 Criticals + 1 Medium all PoC-proven: a post-join re-deposit drains the entire prize pool (honest winner gets 0), overwriting accounting permanently locks a user's first deposit, and balanceOf-based pricing dilutes shares. - [Multisig + timelock audit (First Flight)](https://manyaitool.com/products/multisig-timelock-audit) - [md](https://manyaitool.com/products/multisig-timelock-audit/index.md): Audited a CodeHawks 3-of-N multisig wallet; 1 High proven by PoC: revoking a signer never clears their confirmations on pending txs — these ghost votes stay in the quorum, so a single remaining signer can execute a 3-of-N transaction and drain the wallet. - [Order-book DEX audit (First Flight)](https://manyaitool.com/products/order-book-dex-audit) - [md](https://manyaitool.com/products/order-book-dex-audit/index.md): Audited a CodeHawks order-book DEX; 1 High proven by PoC: buyOrder has no slippage bound, so a seller front-runs amendSellOrder to inflate price/shrink amount and drain the buyer's infinite USDC approval (900k USDC for 1 satoshi). Plus 1 Low; 2 issues adversarially excluded. - [PuppyRaffle audit (First Flight)](https://manyaitool.com/products/puppyraffle-audit) - [md](https://manyaitool.com/products/puppyraffle-audit/index.md): Audited the classic CodeHawks PuppyRaffle; 2 Criticals + 3 Highs all PoC-proven: refund() reentrancy drains the contract (1 ETH in, 5 ETH out), predictable RNG, a uint64 fee overflow locking 20 ETH, a force-send DoS, and an O(n²) gas DoS on entry. - [JuCoin $511M reserve debunk](https://manyaitool.com/products/jucoin) - [md](https://manyaitool.com/products/jucoin/index.md): On-chain data exposed their PoR: the "USDC reserve" was a self-deployed, mintable shitcoin with only 14 holders chain-wide. Done in minutes, at zero cost. - [SpaceX IPO Radar — Tokenized Exposure & Valuation](https://manyaitool.com/products/spacex-ipo-radar) - [md](https://manyaitool.com/products/spacex-ipo-radar/index.md): A pre-trade checklist for tokenized SpaceX exposure: which products are backed by real securities, which are SPVs, notes, or synthetic perps, whether the on-chain implied valuation is expensive, and how much funding costs can eat into a long position. - [Onchain Equity Desk — Perp Premium & Funding](https://manyaitool.com/products/onchain-equity) - [md](https://manyaitool.com/products/onchain-equity/index.md): See US stocks the way they trade on-chain: perp premium vs real price, hourly funding rates, and Solana spot xStock premiums for 58 tickers — one screen. Plus live implied valuations for pre-IPO names like SpaceX, OpenAI, Anthropic. Data from Hyperliquid & Jupiter, 24/7. - [TQQQ Traffic Light — Leveraged ETF Timing](https://manyaitool.com/products/tqqq-radar) - [md](https://manyaitool.com/products/tqqq-radar/index.md): A dead-simple red/green light for leveraged ETFs (TQQQ/UPRO/SOXL): green = hold, red = move to cash to dodge crashes. Nasdaq monthly-MA signal, real backtest cuts max drawdown from −81% to −36.5%. Signal over advice — free, no login. - [GuruFolio — Guru 13F Tracker](https://manyaitool.com/products/guru-13f) - [md](https://manyaitool.com/products/guru-13f/index.md): Turn SEC 13F filings into a smart-money signal. See what Buffett, Burry, and Ackman buy each quarter, with consensus and conviction scores across 80+ gurus. - [Magic Formula Screener](https://manyaitool.com/products/magic-formula) - [md](https://manyaitool.com/products/magic-formula/index.md): Greenblatt's Magic Formula ranking with backtests — the most famous value screen, combining earnings yield and return on capital, refreshed from SEC fundamentals. - [Power & Money Radar — Congress Trades](https://manyaitool.com/products/congress-radar) - [md](https://manyaitool.com/products/congress-radar/index.md): Track Congress members' stock trades and conflict-of-interest red flags (defense committee buying defense stocks, etc.). Signal over advice — we expose power, not stock tips. - [Visible AI Law Firm](https://manyaitool.com/products/ai-lawfirm) - [md](https://manyaitool.com/products/ai-lawfirm/index.md): Open-source: watch a team of 8 AI lawyers work your case live — intake, analysis, comp calc, evidence, drafting the arbitration filing. Comp math is rule-based (never wrong); the LLM handles reasoning. Cloudflare Workers + Hono + React. ## Tool Pages - [JSON Formatter](https://manyaitool.com/tools/json-formatter) - [md](https://manyaitool.com/tools/json-formatter/index.md): Free online JSON formatter and validator. Beautify, minify, and validate JSON data instantly in your browser. No data sent to any server. - [Word Counter](https://manyaitool.com/tools/word-counter) - [md](https://manyaitool.com/tools/word-counter/index.md): Free online word counter tool. Instantly count words, characters, sentences, paragraphs, and estimate reading time. No signup required. - [Base64 Encoder](https://manyaitool.com/tools/base64-encoder) - [md](https://manyaitool.com/tools/base64-encoder/index.md): Free online Base64 encoder and decoder. Convert text to Base64 and back instantly in your browser. Supports Unicode characters. No data uploaded. - [Color Picker](https://manyaitool.com/tools/color-picker) - [md](https://manyaitool.com/tools/color-picker/index.md): Free online color picker and converter. Pick any color and instantly get HEX, RGB, and HSL values. Copy color codes with one click. - [Lorem Ipsum Generator](https://manyaitool.com/tools/lorem-ipsum-generator) - [md](https://manyaitool.com/tools/lorem-ipsum-generator/index.md): Free Lorem Ipsum generator. Generate placeholder text by paragraphs, sentences, or words. Classic Latin dummy text for design and development. - [AI Token Calculator](https://manyaitool.com/tools/ai-token-calculator) - [md](https://manyaitool.com/tools/ai-token-calculator/index.md): Free AI token calculator. Count tokens and estimate costs for GPT-4, Claude, Gemini, and 20+ AI models. Compare pricing across providers instantly. - [JWT Decoder](https://manyaitool.com/tools/jwt-decoder) - [md](https://manyaitool.com/tools/jwt-decoder/index.md): Free online JWT decoder. Paste a JSON Web Token to instantly decode the header and payload, check expiration, and verify claims. No data sent to any server. - [Markdown to HTML](https://manyaitool.com/tools/markdown-to-html) - [md](https://manyaitool.com/tools/markdown-to-html/index.md): Free online Markdown to HTML converter. Convert Markdown syntax to clean HTML code with live preview. Supports headings, lists, code blocks, tables, and more. - [Timestamp Converter](https://manyaitool.com/tools/timestamp-converter) - [md](https://manyaitool.com/tools/timestamp-converter/index.md): Free online Unix timestamp converter. Convert between Unix epoch timestamps and human-readable dates. Live clock, relative time, UTC and local timezone support. - [SVG to PNG](https://manyaitool.com/tools/svg-to-png) - [md](https://manyaitool.com/tools/svg-to-png/index.md): Free online SVG to PNG converter. Upload or paste SVG code and download as PNG with custom scale (1x-4x) and background color. No upload to server. - [Image to Base64](https://manyaitool.com/tools/image-to-base64) - [md](https://manyaitool.com/tools/image-to-base64/index.md): Free online image to Base64 converter. Upload any image and get Base64 string, data URI, HTML img tag, and CSS background code. No server upload. - [Moon Phase Calendar](https://manyaitool.com/tools/moon-phase-calendar) - [md](https://manyaitool.com/tools/moon-phase-calendar/index.md): Free moon phase calculator. See tonight's moon phase, illumination %, and a live countdown to the next full moon, new moon, supermoon & blue moon. - [National Days Calendar](https://manyaitool.com/tools/national-days-calendar) - [md](https://manyaitool.com/tools/national-days-calendar/index.md): Free national days calendar. See what national day is today, get exact dates and countdowns for National Donut Day, Coffee Day, Pizza Day and more. ## Full Tool Summaries ### JSON Formatter & Validator Online Free Free online JSON formatter and validator. Beautify, minify, and validate JSON data instantly in your browser. No data sent to any server. Keywords: json formatter, json validator, format json online, json beautifier, json prettifier ### Word Counter - Count Words & Characters Free Free online word counter tool. Instantly count words, characters, sentences, paragraphs, and estimate reading time. No signup required. Keywords: word counter, character counter, word count tool, letter counter, text counter ### Base64 Encoder & Decoder Online Free Free online Base64 encoder and decoder. Convert text to Base64 and back instantly in your browser. Supports Unicode characters. No data uploaded. Keywords: base64 encode, base64 decode, base64 encoder decoder, encode base64 online, decode base64 ### Color Picker & Converter - HEX RGB HSL Free Free online color picker and converter. Pick any color and instantly get HEX, RGB, and HSL values. Copy color codes with one click. Keywords: color picker, hex to rgb, rgb to hex, color converter, hex to hsl, color code ### Lorem Ipsum Generator - Generate Placeholder Text Free Free Lorem Ipsum generator. Generate placeholder text by paragraphs, sentences, or words. Classic Latin dummy text for design and development. Keywords: lorem ipsum generator, lorem ipsum, dummy text generator, placeholder text, random text generator ### AI Token Calculator - LLM Cost Estimator Free Free AI token calculator. Count tokens and estimate costs for GPT-4, Claude, Gemini, and 20+ AI models. Compare pricing across providers instantly. Keywords: ai token calculator, llm cost calculator, openai token counter, chatgpt token calculator, claude token counter, gpt-4 pricing calculator, ai api cost estimator ### JWT Decoder - Decode JSON Web Tokens Free Free online JWT decoder. Paste a JSON Web Token to instantly decode the header and payload, check expiration, and verify claims. No data sent to any server. Keywords: jwt decoder, jwt decode online, json web token decoder, jwt parser, jwt token viewer, decode jwt token ### Markdown to HTML Converter Online Free Free online Markdown to HTML converter. Convert Markdown syntax to clean HTML code with live preview. Supports headings, lists, code blocks, tables, and more. Keywords: markdown to html, markdown converter, markdown to html converter, convert markdown online, md to html, markdown parser ### Unix Timestamp Converter - Epoch to Date Free Free online Unix timestamp converter. Convert between Unix epoch timestamps and human-readable dates. Live clock, relative time, UTC and local timezone support. Keywords: unix timestamp converter, epoch converter, timestamp to date, epoch to date, unix time converter, date to timestamp ### SVG to PNG Converter Online Free Free online SVG to PNG converter. Upload or paste SVG code and download as PNG with custom scale (1x-4x) and background color. No upload to server. Keywords: svg to png, svg to png converter, convert svg to png, svg converter online, svg to png online, svg to image ### Image to Base64 Converter Online Free Free online image to Base64 converter. Upload any image and get Base64 string, data URI, HTML img tag, and CSS background code. No server upload. Keywords: image to base64, image to base64 converter, convert image to base64, base64 image encoder, image to data uri, image to base64 online ### Moon Phase Today - Is It a Full Moon Tonight? Free moon phase calculator. See tonight's moon phase, illumination %, and a live countdown to the next full moon, new moon, supermoon & blue moon. Keywords: moon phase today, full moon tonight, is it a full moon tonight, next full moon, moon phase calendar, full moon calendar 2026, current moon phase, blue moon 2026 ### What National Day Is Today? - Calendar & Dates Free national days calendar. See what national day is today, get exact dates and countdowns for National Donut Day, Coffee Day, Pizza Day and more. Keywords: what national day is today, national days calendar, national donut day 2026, national day today, national food days, national coffee day, what national day is it ## Full Product Summaries ### PolyBall — Football Markets Pulls scattered Polymarket football markets, on-chain whale moves and match data into one decision-ready tool. Category: Prediction Markets ### PolyWeather Ensemble forecasts from 40 weather models to spot mispriced Polymarket weather markets. Category: Prediction Markets ### PolyMix Multi-platform odds comparison for NBA prediction markets across Polymarket, Kalshi and five major books. Category: Prediction Markets ### PolyWhale Whale detection across Polymarket and Kalshi — whale profiles, whale sentiment and top markets. Category: Prediction Markets ### PolyNFL One-stop NFL prediction-market analysis: game overview, weather impact, ESPN/Polymarket odds and live data. Category: Prediction Markets ### PolyNBA Aggregates Polymarket NBA markets with ESPN data — recent form, H2H, scoring trends and volume, all on one page. Category: Prediction Markets ### PolyLastChance An end-of-session monitor with live prices and opportunity alerts to cash in on last-chance plays. Category: Prediction Markets ### PolySeer A deep AI tool for prediction markets. Category: Prediction Markets ### PolySurge Real-time anomaly signals across 100 high-liquidity Polymarket markets — catch moves first. Category: Prediction Markets ### ProofRank — Hyperliquid Vault Check Check Hyperliquid vaults before you copy them: real APR, drawdown, recent PnL and risk verdicts translated into plain language. Category: Perp DEX ### PerpOIRadar Tracks open-interest (OI) changes across exchanges in real time. Category: Perp DEX ### PerpFunding A cross-exchange perpetual funding-rate radar — a tool for steady funding-rate arbitrage. Category: Perp DEX ### HyperSmart Before you copy a trader, backtest them on historical data to see the real returns. Category: Perp DEX ### duola Funding Agent A Telegram-first funding-rate agent that watches opportunities, filters traps, recalculates by capital size and keeps tracking after you click Track. Category: AI Agent ### Solana Alpha Tracker An MCP that watches top Solana wallets for you — 38 built-in smart-money traders, entry-quality scoring and cluster signals, so you just ask Claude 'should I copy this trade?' Category: AI Agent ### Airdrop Hunter Multi-wallet airdrop scanner with sybil radar — sweep a batch of wallets across 12 high-value points/rewards projects in one query; hits, misses, claim status and sybil risk at once. Category: AI Agent ### Pendle MCP An MCP for DeFi's biggest yield market — scan 700+ PT fixed-yield markets across 10 chains, PT leverage loops with precise liquidation bounds, and Boros funding-rate spreads. Category: AI Agent ### Wallet Radar A durable multi-wallet MCP — a 5–200 address watchlist with cross-protocol liquidation monitoring (Aave/Compound/Morpho/Spark) and price-impact simulation, remembered across sessions. Category: AI Agent ### Token Xray An agent-native token safety MCP — fuses contract, deployer reputation, LP-lock authenticity and bridged-fund detection into one green/yellow/red verdict; catches serial ruggers others miss. Category: AI Agent ### Funding Arb Scanner The first funding-arb MCP that computes NET returns — across 9 exchanges it subtracts taker fees to give you net USD and break-even hours, not just the raw spread. Category: AI Agent ### MemeCat Paste a tweet and AI generates the meme coin's name, ticker and logo — and tells you why it could pop. Category: Web3 ### On-Chain Destiny Bureau A daily reading so you never choose wrong — on-chain mysticism, 'scientific' fortune-telling. Category: Web3 ### DuoLaSafe — Web3 Security Audits & Forensics Smart-contract audits, on-chain forensics and asset-recovery support — every report public, PoC-backed, with an adversarial ruled-out section. Category: Security ### Stolen-Fund Tracer — where did the money go? Paste a hacked address and trace the funds hop by hop. Our in-house intel DB labels every hop — and pinpoints when the loot lands in an exchange deposit address (a freezable endpoint) or hits a mixer (trace breakpoint). The first concrete step toward recovery, free. Category: Security ### Wallet Approval Checkup — who can drain you? Most thefts trace back to one forgotten approval. Scan a wallet (read-only) for every live token approval and flag the unlimited ones — plus whether the spender is a known drainer / malicious contract, cross-checked against DuoLaSafe's intel DB and a multi-source risk engine. The part Revoke.cash won't tell you. Category: Security ### Token X-ray — honeypot & rug deep check Paste any token contract for a real on-chain check: honeypot buy/sell simulation, taxes, mint/freeze powers, proxy upgradability — plus deployer reputation against DuoLaSafe's intel DB (the serial-rugger signal generic scanners miss). Green / yellow / red at a glance; known stablecoins won't false-positive. Category: Security ### Is this real USDT? — Stablecoin authenticity check Paste any token contract and check it against an all-chain official-stablecoin registry plus our in-house fake-stablecoin blacklist. Address matches official = real; matches our blacklist = scam. Catches counterfeit USDT/USDC — especially on TRON, where most fakes live. Nobody else fuses official-address registry + honeypot + scam intel into one verdict. Category: Security ### Wallet drained? — Free self-rescue triage wizard A free triage wizard for theft victims: it works out how you were hit, gives prioritized stop-the-bleed steps, flags the attacker address against our intel DB, and auto-generates pre-filled IC3 / Chainabuse / police / exchange-freeze reports. Read-only, Chinese-first, and it never asks for your seed phrase — unlike the recovery scams that prey on victims. Category: Security ### Is this a phishing site? — Domain check + free API Check any domain against DuoLaSafe's 820k+ phishing & malicious domains, with parent-domain matching. Free, real-time, open API with no key — wallets and dApps can plug in directly. Undercuts the $999/mo, deliberately delayed commercial blacklists. Category: Security ### Polymarket $2.9M fund-tracking investigation A frontend supply-chain attack drained ~$2.9M from 11 users. The press said the funds still sit in the consolidation wallet — we traced the chain: already moved, split and idle across 3 wallets, plus the address-poisoning targeting the loot. A verifiable, dated on-chain snapshot. Category: Security ### Verus bridge $11.58M post-mortem The bridge's submitImports never enforced cross-chain amount conservation; $11.58M drained, swapped to 5,402 ETH. A full 7-section root-cause + attack-tx breakdown with fund tracing: reported as "funds unmoved," yet on-chain the loot split out (4,052+1,350 ETH) just 3 days later and the wallet was empty by Jun 27. Category: Security ### Humanity Protocol $36M analysis Not a contract bug — a fake multisig: the 7 keys controlling the token and bridge were all backed up on one developer's laptop, and a single Bithumb-spoofing phishing email took the lot, moving ~447M $H across ETH/BSC. A 7-section root-cause + attack-flow breakdown; Quantstamp attributes it to DPRK. Category: Security ### Bybit $1.5B — the largest hack ever Lazarus tampered Safe{Wallet}'s frontend JS, swapping a cold-wallet transfer for a DELEGATECALL that replaced the implementation and drained the vault. We verified on-chain that the Safe's slot0 still points to the malicious contract. A 7-section breakdown. Category: Security ### KelpDAO $292M bridge hack A 1-of-1 LayerZero DVN was poisoned via compromised RPC nodes + DDoS failover, forging a phantom source-chain burn to mint 116,500 unbacked rsETH. We verified the mint tx, GUID, Tornado funding and Arbitrum freeze. Attributed to Lazarus. Category: Security ### Drift $285M access-control takeover Not a contract bug: attackers spent 6 months social-engineering into the Security Council via a fake trading firm, weaponizing Solana durable nonces to pre-sign admin transfers and drain vaults with fake collateral. Attributed to DPRK. Category: Security ### Resolv $25M KMS key compromise Resolv's AWS KMS signing key was compromised, minting 80M unbacked USR from ~$100K USDC via two completeSwap calls and cashing out ~11K ETH. Root cause: a single off-chain key plus no on-chain mint cap. On-chain verified. Category: Security ### Truebit $26.2M integer overflow A legacy purchase contract (Solidity 0.6.10, no overflow checks) overflowed its pricing math; a huge input wrapped the price to ~0, letting the attacker mint TRU for free and drain 8,535 ETH in one tx. Attack tx and overflow math both verified on-chain. Category: Security ### Moonwell oracle misconfiguration An oracle update dropped the ETH/USD leg of cbETH pricing, mispricing cbETH at ~$1.12 vs ~$2,200; liquidators seized 1,096 cbETH for ~$1 each, leaving ~$1.78M bad debt. One missing price leg = real money. Category: Security ### Cetus $220M AMM overflow Sui's largest AMM: a wrong overflow mask in checked_shlw (0xffff…<<192 vs 1<<192) let a u256 left-shift silently truncate, minting ~1.03e34 liquidity for ~1 token to drain reserves. ~$220M lost; ~$162M frozen by validators and returned via governance. Category: Security ### GMX V1 $42M reentrancy Arbitrum perp DEX: a reentrancy via the executeDecreaseOrder callback skipped the globalShortAveragePrices update, crushing BTC short avg price and inflating GLP for profitable redemptions. Attack tx verified on-chain; all funds returned, $5M white-hat bounty. Category: Security ### Rhea Finance $18.4M slippage-check flaw NEAR's top DeFi. Early labeled oracle manipulation, the real cause was a Burrowland margin slippage-check that summed per-hop min-outputs across a crafted route while settling actuals with no re-check. Loss revised $7.6M→$18.4M; ~$11.2M returned/frozen. Category: Security ### Aperture Finance $3.67M arbitrary call An arbitrary-call flaw in the V3/V4 executor: the custom-swap function (selector 0x1d33) left call target/calldata unvalidated, letting the attacker craft transferFrom via the victim's pre-existing approvals and drain 36.9 WBTC. Main tx verified; ~$2.4M to Tornado. Category: Security ### Foom Cash $2.3M zk-verifier flaw zk-SNARK privacy protocol: a skipped Phase-2 trusted-setup randomization left Groth16 gamma==delta, collapsing the pairing check to 1=1 so forged proofs passed without a witness. ~$2.26M drained across ETH+Base; ~$1.84M recovered by white hats. Category: Security ### Venus user $13.5M phishing blind-sign A power user was phished via a fake Zoom client and a tampered wallet extension, blind-signing an updateDelegate that handed account-delegate rights to the attacker — ~$13.5M drained. The contract held; the signature didn't. Governance force-liquidated; funds fully recovered in 12h. Category: Security ### Aztec deprecated bridge $2.16M forged proof A deprecated, immutable, abandoned RollupProcessor bridge: its escapeHatch had no access control and proofs weren't bound to fund ownership, so a forged proof drained ~1,158 ETH + 150k DAI in one tx. Tx and the now-empty victim contract verified on-chain. Category: Security ### Base fake-stablecoin scan: 70 fake PYUSD Our in-house scanner flagged 70 fake stablecoins on Base impersonating PYUSD/FDUSD in a single pass: most with fake decimals (18 vs real PYUSD's 6) and very few holders — phishing-scam bait. All catalogued for lookup. Original first-party data. Category: Security ### Twyne v1 leveraged-lending audit Full audit of a leveraged-lending protocol on Euler EVC/EVK: manual review of 11 contracts + Slither + Foundry fuzz, adversarially verifying and refuting 6 potential attack surfaces. Report includes a "ruled-out attacks" section. Category: Security ### Silo V3 isolated-lending audit Manual + adversarial verification of the core silo-core: 0 highs, 7 candidate attack surfaces ruled out one by one, report public and verifiable. Category: Security ### ThunderLoan flash-loan audit (First Flight) Audited the CodeHawks ThunderLoan flash-loan protocol; 3 Highs all PoC-proven: deposit() corrupts the exchange rate (redeem more than deposited, draining LPs), an upgrade storage-slot collision silently rewrites the fee, and a manipulable spot oracle enables zero-fee flash loans. Category: Security ### BriVault betting-vault audit (First Flight) Audited the CodeHawks BriVault ERC4626 betting vault; 2 Criticals + 1 Medium all PoC-proven: a post-join re-deposit drains the entire prize pool (honest winner gets 0), overwriting accounting permanently locks a user's first deposit, and balanceOf-based pricing dilutes shares. Category: Security ### Multisig + timelock audit (First Flight) Audited a CodeHawks 3-of-N multisig wallet; 1 High proven by PoC: revoking a signer never clears their confirmations on pending txs — these ghost votes stay in the quorum, so a single remaining signer can execute a 3-of-N transaction and drain the wallet. Category: Security ### Order-book DEX audit (First Flight) Audited a CodeHawks order-book DEX; 1 High proven by PoC: buyOrder has no slippage bound, so a seller front-runs amendSellOrder to inflate price/shrink amount and drain the buyer's infinite USDC approval (900k USDC for 1 satoshi). Plus 1 Low; 2 issues adversarially excluded. Category: Security ### PuppyRaffle audit (First Flight) Audited the classic CodeHawks PuppyRaffle; 2 Criticals + 3 Highs all PoC-proven: refund() reentrancy drains the contract (1 ETH in, 5 ETH out), predictable RNG, a uint64 fee overflow locking 20 ETH, a force-send DoS, and an O(n²) gas DoS on entry. Category: Security ### JuCoin $511M reserve debunk On-chain data exposed their PoR: the "USDC reserve" was a self-deployed, mintable shitcoin with only 14 holders chain-wide. Done in minutes, at zero cost. Category: Security ### SpaceX IPO Radar — Tokenized Exposure & Valuation A pre-trade checklist for tokenized SpaceX exposure: which products are backed by real securities, which are SPVs, notes, or synthetic perps, whether the on-chain implied valuation is expensive, and how much funding costs can eat into a long position. Category: US Stocks ### Onchain Equity Desk — Perp Premium & Funding See US stocks the way they trade on-chain: perp premium vs real price, hourly funding rates, and Solana spot xStock premiums for 58 tickers — one screen. Plus live implied valuations for pre-IPO names like SpaceX, OpenAI, Anthropic. Data from Hyperliquid & Jupiter, 24/7. Category: US Stocks ### TQQQ Traffic Light — Leveraged ETF Timing A dead-simple red/green light for leveraged ETFs (TQQQ/UPRO/SOXL): green = hold, red = move to cash to dodge crashes. Nasdaq monthly-MA signal, real backtest cuts max drawdown from −81% to −36.5%. Signal over advice — free, no login. Category: US Stocks ### GuruFolio — Guru 13F Tracker Turn SEC 13F filings into a smart-money signal. See what Buffett, Burry, and Ackman buy each quarter, with consensus and conviction scores across 80+ gurus. Category: US Stocks ### Magic Formula Screener Greenblatt's Magic Formula ranking with backtests — the most famous value screen, combining earnings yield and return on capital, refreshed from SEC fundamentals. Category: US Stocks ### Power & Money Radar — Congress Trades Track Congress members' stock trades and conflict-of-interest red flags (defense committee buying defense stocks, etc.). Signal over advice — we expose power, not stock tips. Category: US Stocks ### Visible AI Law Firm Open-source: watch a team of 8 AI lawyers work your case live — intake, analysis, comp calc, evidence, drafting the arbitration filing. Comp math is rule-based (never wrong); the LLM handles reasoning. Cloudflare Workers + Hono + React. Category: Dev