PHISHDETECTPRO: A SERVLET-BASED SMART WALLET SIMULATION AND APPROVAL PHISHING DETECTION FRAMEWORK USING INTENT VALIDATION

Abstract

This project investigates a highly deceptive blockchain scam known as approval phishing, where users are tricked into unknowingly granting access to their wallet funds. The fraud is executed via a malicious smart contract architecture (SCA) in which the user unknowingly approves a contract controlled by an attacker. This contract is then triggered by a malicious external owned account (EOA), allowing the unauthorized transfer of tokens. The attack is exacerbated by wallet UI weaknesses, which often fail to adequately present risks associated with approval requests. The scam infrastructure includes a comprehensive management system hosted on a secured web server, often hidden behind CDN layers to avoid block listing. This system not only handles the fake investment interface shown to victims but also manages scammer operations including statistics, fund withdrawals, and dynamic content manipulation. This project aims to simulate and analyse these attacks through a ServletJSP-based web application, evaluate wallet vulnerabilities, detect scam contract behaviour, and propose smart wallet enhancements inspired by EIP-4337-based account abstraction. A comparative study and approval analysis system is also implemented to educate users and recommend secure wallet choices. Index Terms – Blockchain security, approval phishing, smart contracts, externally owned account (EOA), cryptocurrency wallet security, account abstraction, EIP-4337, phishing detection, decentralized applications (DApps), blockchain fraud detection, token approval, smart wallet,cybersecurity.