Like the bootloader it is named after, Grub runs first. It simulates the transaction, decodes the signature, checks the token and audits your approvals, then shows you its face. Unimpressed means safe.
Paste what the dapp asked you to sign: a transaction (hex calldata, or the JSON your wallet shows) or an EIP-712 typed message. The grub decodes it, replays it on the live chain state and lists every asset that moves and every permission you would grant.
The grub reads the bytecode for privileged functions, checks whether the source is verified, who owns it, and then actually buys and sells it on a fork of the live chain to measure the real tax. Nothing is signed, nothing is spent.
Approvals outlive the dapp that asked for them. The grub checks your allowances against the routers and aggregators of BNB Chain, Permit2, and scans recent Approval events for anything else. Unlimited allowances to unknown contracts are what drainers live on.
Paste a DM, a tweet, an email or a link. The grub scores the wording, resolves every link against the MetaMask and ScamSniffer blocklists, and checks any address against known drainers.
Give it a hash, an address, a token, calldata or a question. It picks the right tools, runs them against the live chain and answers. Every number comes from a tool, never from a model. brain: rules
Fixed supply, all of it in a single-sided Uniswap V4 pool on BNB Chain, with a tax hook that steps down from 15 % to 5 %. Holding $GRUB unlocks deeper scans and the server brain.
