Who it helps, the risk, and the improvement
Intended user: people in India who pay or receive crypto, and who usually have no way to tell whether a wallet address is safe before they send money to it. The risk: sending funds to a scam, ransomware or sanctioned wallet. Once a Bitcoin payment is sent it cannot be reversed. The improvement: CryptPilot's Wallet Guard checks an address before you pay and explains why, so a risky payment can be stopped in time.
What it does
- Wallet Guard: paste a Bitcoin address and get ALLOW / WARN / BLOCK / UNKNOWN, a 0 to 100 risk score, the nearest flagged wallet, OFAC and Ransomwhere matches, an inspectable 1 to 3 hop evidence graph, and a plain-language explanation in English or Hindi that is grounded only in the retrieved evidence. UNKNOWN is never shown as "safe".
- Risk scoring: an XGBoost model on graph features, with TigerGraph Savanna (NetworkX fallback) and Elliptic++ labels plus the OFAC list.
- FinPilot copilot: a personal-finance copilot with a 5-pillar financial health score, a Monte Carlo cash-flow forecast (P10/P50/P90) and a what-if simulator, so users can also see the money risk on their own side.
- Fraud-aware councils: AI specialist agents, including a Fraud Sentinel and a Chain Analyst that adds wallet graph evidence, vote on risk and record their dissent.
- Tamper-evident statement: a printable monthly statement with a SHA-256 audit hash, optionally anchored on Base Sepolia via EAS.
- Security: TOTP MFA, per-user scoping with Firebase tokens, and a crypto bridge with a route allowlist.
How we built it
Next.js 16, React 19, TypeScript and Tailwind CSS v4 on the front end; two FastAPI (Python) services, one for the finance copilot and one for the wallet-risk engine; XGBoost; TigerGraph and NetworkX for the graph; Firebase and Firestore; NVIDIA-hosted LLMs with an offline rule router fallback; Base Sepolia EAS attestations.
Honest status
- The wallet results in the demo come from a synthetic dataset, and the app labels them as synthetic or mock data. Payments run in test mode / testnet only; no real money moves.
- Pre-existing work (disclosure): CryptPilot combines our team's FinPilot copilot (started before this event) with the Cryptiq wallet-risk service; the integrated CryptPilot app was built in late October 2026. Libraries, datasets (Elliptic++, OFAC, Ransomwhere) and AI coding assistance are credited in the repository.
Live demo: https://cryptpilot.vercel.app (press "Explore Demo App"; the free backend may take up to a minute to wake: open https://crypt-pilot.onrender.com/api/health first) Code: https://github.com/madhavzanwar/crypt-pilot Team: Madhav Zanwar, Divyani Papalkar
Built With
- bitcoin
- ethereum-attestation-service
- fastapi
- firebase
- networkx
- next.js
- python
- react
- tailwind-css
- tigergraph
- typescript
- xgboost
