> ## Documentation Index
> Fetch the complete documentation index at: https://docs.webacy.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Scan Raw EVM Transaction for Security Risks

> Analyzes a raw EVM transaction for security risks including malicious contracts, suspicious addresses, and potential threats. Supports Ethereum (1), BSC (56), Polygon (137), Optimism (10), Arbitrum (42161), and Base (8453).



## OpenAPI

````yaml POST /scan/{fromAddress}/transactions
openapi: 3.0.1
info:
  title: Risk Score API
  description: API definition for Webacy Risk Scores
  version: 1.2.0
servers:
  - url: https://api.webacy.com
    description: Webacy Risk Score API (Production)
  - url: https://api-development.webacy.com
    description: Webacy Risk Score API (Development)
  - url: http://0.0.0.0:3030/api/v1/risk-score
    description: Webacy Risk Score API - Local
security:
  - api_key: []
tags:
  - name: Threat Risks
    description: Analyze addresses for security threats and malicious activity
  - name: Sanction Checks
    description: Check addresses against OFAC and other sanction lists
  - name: Approval Risks
    description: Analyze token approvals and associated risks
  - name: Transaction Risks
    description: Assess risk details for blockchain transactions
  - name: Exposure Risk
    description: Understand risk profile and exposure of addresses
  - name: Contract Risk
    description: Real-time smart contract security analysis
  - name: URL Risks
    description: Analyze URLs for phishing and security threats
  - name: API Usage
    description: Monitor and manage API consumption
  - name: Holder Analysis
    description: Token holder distribution and sniper detection
  - name: Address Poisoning
    description: Detect address poisoning attack patterns
  - name: Token Analysis
    description: Comprehensive token security and market analysis
  - name: Pool Analysis
    description: Liquidity pool data and analysis
  - name: Transaction Scanning
    description: Scan and simulate transactions for risks
  - name: trading-lite
    description: Lightweight trading risk assessment
  - name: RWA & Pegged Tokens
    description: >-
      Real-world asset and pegged-token analytics (supply flows, mint/burn
      velocity)
  - name: Vault Risk v3
    description: >-
      Webacy-native v3 vault risk surface — composite grade, categories,
      coverage, and the framework taxonomy (RFC-019).
  - name: RWA Risk v3
    description: >-
      Webacy-native v3 RWA / stablecoin risk surface — composite grade,
      structural-health criteria, and batch (RFC-019).
paths:
  /scan/{fromAddress}/transactions:
    post:
      tags:
        - Transaction Scanning
      summary: Scan Raw EVM Transaction for Security Risks
      description: >-
        Analyzes a raw EVM transaction for security risks including malicious
        contracts, suspicious addresses, and potential threats. Supports
        Ethereum (1), BSC (56), Polygon (137), Optimism (10), Arbitrum (42161),
        and Base (8453).
      operationId: scanTransaction
      parameters:
        - name: fromAddress
          in: path
          required: true
          description: EVM address that signed the transaction
          schema:
            type: string
          example: '0x742d35Cc6634C0532925a3b8D400E20257D8D4d7'
        - in: query
          name: refreshCache
          description: Force refresh cached risk data
          required: false
          schema:
            type: boolean
            default: false
      requestBody:
        required: true
        content:
          application/json:
            schema:
              type: object
              properties:
                tx:
                  type: object
                  description: Transaction details
                  properties:
                    from:
                      type: string
                      description: Address that signed the transaction
                    raw:
                      type: string
                      description: >-
                        Raw transaction data in hex format (0x-prefixed,
                        even-length hex string or 66-character transaction hash)
                  required:
                    - from
                    - raw
                chain:
                  type: integer
                  description: >-
                    Chain ID as a number. Supported chains: 1 (Ethereum), 56
                    (BSC), 137 (Polygon), 10 (Optimism), 42161 (Arbitrum), 8453
                    (Base)
                  enum:
                    - 1
                    - 56
                    - 137
                    - 10
                    - 42161
                    - 8453
                  example: 1
                block:
                  type: integer
                  description: Optional block number
                  example: 12345678
                domain:
                  type: string
                  description: Optional domain
              required:
                - tx
                - chain
            example:
              tx:
                from: '0x1f9090aaE28b8a3dCeaDf281B0F12828e676c326'
                raw: >-
                  0x02f86f01830c61ff847735940084aa945e38829c409496221423681a6d52e184d440a8efcebb105c724280b844a9059cbb0000000000000000000000001f9090aae28b8a3dceadf281b0f12828e676c3260000000000000000000000000000000000000000000000056bc75e2d63100000c0
              chain: 1
      responses:
        '200':
          description: Transaction risk analysis completed successfully
          content:
            application/json:
              schema:
                type: object
                properties:
                  simulation:
                    type: array
                    description: >-
                      Transaction simulation results with risk analysis
                      including partyRisk, counterpartyRisk, assetRisk, and
                      functionRisk (if risky 4-byte signature detected)
                  block:
                    type: integer
                    description: >-
                      Block number where transaction would be included (null for
                      pending transactions)
                  timestamp:
                    type: string
                    format: date-time
                    description: Timestamp of the scan
                  chain:
                    type: string
                    description: Chain identifier
                    example: eth
        '400':
          description: >-
            Invalid request parameters (wrong chain, invalid address, or
            malformed transaction)
          content:
            application/json:
              examples:
                missingChain:
                  value:
                    message: Chain parameter is required
                invalidRaw:
                  value:
                    message: >-
                      Invalid raw transaction: must be a 0x-prefixed,
                      even-length hex string or a 66-character tx hash
        '401':
          $ref: '#/components/responses/UnauthorizedError'
      security:
        - api_key: []
components:
  responses:
    UnauthorizedError:
      description: Authorization information is missing or invalid
      content:
        application/json:
          example:
            message: Unauthorized
  securitySchemes:
    api_key:
      type: apiKey
      in: header
      name: x-api-key

````