Cowrie Research

hashdit-primary-sources-2026-04-30

3 min read

HashDit primary sources — 2026-04-30

Project status in this pass

  • No canonical standalone whitepaper or litepaper surfaced.
  • The clearest current source of truth is HashDit’s official documentation index and API-reference pages.

Primary-source snapshots

1) Official homepage

  • URL: https://www.hashdit.io/
  • Key excerpt:
    • The homepage rendered only a minimal HashDit shell in this pass, so it was low-signal by itself.
    • The stronger primary-source surface was the docs portal rather than the marketing homepage.

2) Documentation homepage

  • URL: https://docs.hashdit.io/
  • Key excerpt:
    • The docs introduction says the HashDit API provides threat intelligence for analyzing domains and URLs for potential security risks.
    • It says all API requests use API-key authentication and the base URL https://service.hashdit.io.
    • The landing page foregrounds endpoint families rather than a single product page.

3) Documentation index (llms.txt)

  • URL: https://docs.hashdit.io/llms.txt
  • Key excerpt:
    • The official docs index enumerates endpoint families for address classification, address poisoning detection, address security v2, domain security, EVM token security, Solana token security, transaction security, and transaction simulation.
    • This index is the clearest compact map of HashDit’s current product surface.
    • The docs also expose a long-running blog/report archive, which is a useful secondary clue that HashDit publishes security-research material in addition to API endpoints.

4) Domain Security endpoint

  • URL: https://docs.hashdit.io/api-reference/endpoint/domain-security
  • Key excerpt:
    • The page says HashDit checks a given domain or URL for potential security risks using HashDit threat intelligence.
    • It says the endpoint returns a risk level plus detailed indicators.
    • The docs explicitly note that this endpoint does not require a chain ID because it analyzes domains and URLs rather than blockchain addresses.

5) Address Poisoning Detection endpoint

  • URL: https://docs.hashdit.io/api-reference/endpoint/address-poisoning
  • Key excerpt:
    • The page says HashDit provides contextual analysis of addresses and tokens to detect spoofing-based poisoning attacks.
    • It evaluates whether an address or token is dangerous in the context of a specific user and asset.
    • The examples section explicitly distinguishes safe cases, spoofing attacks, and known poisoning addresses.

6) Transaction Security endpoint

  • URL: https://docs.hashdit.io/api-reference/endpoint/transaction-security
  • Key excerpt:
    • The page says HashDit analyzes blockchain transactions before or after execution to identify security risks.
    • It inspects calldata, detects dangerous patterns such as unlimited approvals, evaluates dapp/domain reputation, and returns an overall risk score with explanations.
    • The page explicitly says the endpoint is designed for wallets, signing flows, and transaction-confirmation screens.

Working conclusion

HashDit is best cataloged as web3 threat-intelligence and wallet-protection infrastructure. The combined endpoint surface suggests a control plane for phishing detection, transaction screening, address and token risk analysis, and pre-signing security rather than a narrow single-endpoint scam checker.

Graph View