The Raid & Drain Shield — Deploy for Your Web3 Team | Spellbook | Spellbook by The Web3 Wizard
Community OperationsReady to deployv1.0 · updated 15 Oct 2026
The Raid & Drain Shield
Stops Discord & Telegram phishing raids and compromised mod accounts before members lose funds.
Delivery SLA48h / 72h
Delivery modelManaged & one-off
PricingFixed package
EscalationNamed human routing
The problem it solves
Web3 communities are targeted by automated drainer raids and social-engineering attacks. Human mods sleep, miss stealth links, or get session-hijacked, resulting in stolen user funds and catastrophic PR.
Watches for patterns associated with spam, phishing, and impersonation in real time, then surfaces suspicious activity for a human to act on. It flags and reports; it never bans or removes members automatically.
Who it's for
Public Web3 communities targeted by recurring scams
DAOs and protocols with active token-holder communities
Teams with gaps in moderation coverage outside working hours
Capabilities
Flags suspected spam and phishing patterns
Detects impersonation of team accounts
Queues flagged items with context
Reports recurring patterns
Explicit limitations
What this agent deliberately does not do — so there are no surprises after purchase.
Detection is heuristic; false positives occur
Does not ban or remove by default
Cannot guarantee every malicious message is caught
No promise of perfect scam detection
Supported integrations
DiscordTelegramSlack
Deployment targets: Discord · Telegram
What you provide
Scoped, revocable credentials and configuration. Never private keys or seed phrases.
Approved review thresholds
Scoped moderation permissions
Review queue destination
What's included in setup
Threshold calibration
Review queue setup
Incident runbook
Technical deliverables
Concrete production-grade artifacts built, configured, and verified for your deployment.
Anti-phishing detection daemon with domain similarity heuristics and drainer blocklists
Automated message purge and member quarantine microservice
Forensic audit logging database tracking deleted content and offending user IDs
Discord & Telegram bot configurations with least-privilege moderation permissions
Emergency raid lock/unlock runbook and trigger script
Workflows & execution pipeline
Included automated steps and event-handling pipelines.
Real-time URL parsing against known crypto phishing feeds and typosquat heuristics
Instant message redaction and temporary member timeout
Moderator alert webhook with risk score and evidence snapshot
Channel lockdown mode triggerable via moderator command
Testing & acceptance criteria
Specific verification tests your engineer conducts before handover.
100% detection rate on 20 known test phishing patterns and obfuscated links
Sub-500ms purge execution on detected malicious URLs
Zero false-positive triggers on official protocol domains and verified socials
Documentation & handover assets
Everything provided for your team to understand, inspect, and operate.
Source code repository and service configuration definitions
Threat feed integration documentation and update script
Moderation permission checklist for Discord and Telegram
30-day engineer coverage for filter rule tuning
Infrastructure & API cost ownership
Explicit commercial boundaries — zero surprise infrastructure charges.
Agreed before delivery, so nothing is implied that has not been confirmed in writing.
Included usageOne community workspace
Usage limitsAlert volume limits agreed before delivery
Support scopeTuning during the agreed window
Delivery clockThe 48h (managed) / 72h (one-off) delivery clock begins when your engineer confirms your setup credentials and target environment.
Delivery & pricing
Managed AgentWe host, configure, monitor and maintain the agent within agreed limits.
One-time setup fee$2,500plus $650 / month
Setup SLA: 48h
Hosting on managed infrastructure
Configuration and tuning
Monitoring and maintenance
Agreed support window
One-Off AgentWe build, configure and test the agent, then hand over the deployment.
Questions before you deploy
Answers on deployment, credentials, pricing and support are in the help centre. If something is still unclear, ask us directly — there is no sales call required.