🛡️ Zionic

Gemini 3-Powered Phishing Protection with Blockchain Rewards

🤖 Gemini 3 AI · 🔐 Real-time Protection · 💰 Earn Rewards · 🌐 Community-Driven · ⚡ Multimodal Analysis

🌐 Visit Our Website | 📖 Documentation | 💬 Report Issues

⚠️ Work in Progress — Unstable

This project is under active development and may contain bugs or breaking changes.

Use for testing and development only. Do not rely on this for production protection.

🌟 About

Zionic is a next-generation browser security extension that harnesses Google's Gemini 3 AI to provide intelligent, real-time protection against phishing attacks, malware, and malicious websites. By combining Gemini 3's advanced reasoning capabilities with community-driven threat validation and blockchain-based incentives, Zionic creates a decentralized security ecosystem where users are both protected and rewarded.

Built specifically for the Gemini 3 1 million Context Window, Zionic showcases the power of Gemini 3's:

🧠 Advanced reasoning for complex threat pattern recognition
🖼️ Multimodal capabilities to analyze webpage visuals, text, and structure
⚡ Low latency for real-time security decisions
🎯 Context understanding to distinguish legitimate sites from sophisticated phishing attempts

Watch Zionic in action: Gemini 3-powered phishing detection, community voting, and blockchain rewards

⚠️ The Problem

Online threats are evolving faster than traditional security solutions can adapt:

🎣 Phishing attacks cost businesses and individuals billions annually
🎭 Sophisticated scams use AI-generated content that fools traditional filters
⚡ Zero-day threats appear before antivirus databases are updated
🏢 Centralized security relies on single points of failure with slow response times
🚫 No incentives exist for users to actively participate in threat detection
🔒 Privacy concerns with cloud-based scanning services that track all browsing

Traditional security solutions can't keep pace with AI-powered phishing attacks, deepfake scams, and rapidly evolving threat vectors. Users need intelligent, adaptive protection that learns and responds in real-time.

💡 Our Solution

Zionic leverages Gemini 3's advanced AI capabilities to create an intelligent, adaptive security layer that protects users while rewarding community participation:

🤖 Gemini 3 AI Brain: Advanced multimodal analysis examines webpage content, visual elements, URL patterns, and behavioral signals to detect even the most sophisticated threats
🔍 Multi-Layer Validation: Gemini 3's reasoning works alongside Google Safe Browsing, AbuseIPDB, Brave Search, and ClamAV for comprehensive protection
🗳️ Community Intelligence: Users validate AI-detected threats, earning blockchain rewards for accurate assessments
⛓️ Decentralized Storage: Threat intelligence stored immutably on Starknet, creating a global security knowledge base
📁 Native File Scanning: Real-time malware detection through integrated ClamAV engine
⭐ Reputation System: Build credibility through consistent, accurate threat reporting

🤖 Why Gemini 3?

Zionic is built specifically to showcase Gemini 3's groundbreaking capabilities for cybersecurity:

🧠 Advanced Reasoning for Threat Detection

Gemini 3's enhanced reasoning allows Zionic to:

Understand context: Distinguish between legitimate financial sites and convincing phishing clones
Recognize patterns: Identify subtle indicators that signal malicious intent (unusual URL structures, mismatched branding, suspicious form fields)
Think multi-step: Analyze the entire attack chain, not just isolated elements
Adapt dynamically: Learn from new threat patterns without requiring database updates

Example: Traditional filters might block "paypa1.com" (obvious typo), but Gemini 3 can detect sophisticated attacks using legitimate-looking domains like "paypal-security-verification.com" by reasoning about intent, content alignment, and behavioral red flags.

🖼️ Multimodal Analysis for Visual Threats

Gemini 3's vision capabilities enable Zionic to:

Analyze page layouts: Detect cloned login pages that look identical to legitimate sites
Examine images: Identify fake logos, manipulated screenshots, and deepfake content
Read embedded text: Extract text from images to catch hidden phishing messages
Evaluate design consistency: Spot subtle visual inconsistencies that signal fraud

Example: A phishing page might perfectly replicate a bank's HTML but use a slightly off-brand logo. Gemini 3's vision can catch these visual discrepancies that text-only analysis would miss.

⚡ Low Latency for Real-Time Protection

Gemini 3's speed ensures:

Instant threat assessment: Sub-second analysis that doesn't slow down browsing
Seamless user experience: Protection that works invisibly in the background
Real-time blocking: Stop threats before users can interact with malicious content
Continuous monitoring: Constant vigilance without performance impact

🎯 Contextual Understanding

Gemini 3's deep language understanding allows Zionic to:

Detect social engineering: Recognize manipulative language patterns and urgency tactics
Understand intent: Differentiate between legitimate security warnings and scare tactics
Analyze sentiment: Flag emotionally manipulative content designed to bypass rational thinking
Multilingual protection: Provide consistent security across languages and regions

Example: Gemini 3 can identify phishing emails that say "Your account will be suspended in 24 hours unless you verify immediately" as using classic urgency-based social engineering, even if the grammar and formatting are perfect.

✨ Why Zionic?

👤 For Users

🤖 Gemini 3 Intelligence: Protection powered by Google's most capable AI model
💰 Get paid to browse safely (earn STRK tokens for contributing to security)
⚡ Real-time protection against phishing, malware, and emerging threats
🔐 Privacy-first: Your browsing stays local; only threats are analyzed and reported
🗳️ Community power: Your validation votes shape the global threat database
🛡️ Multi-layered security: Gemini 3 AI + community wisdom + traditional antivirus

🌐 For the Ecosystem

🧠 AI-first security: Leverages Gemini 3's reasoning to stay ahead of evolving threats
🔄 Decentralized threat intelligence that no single entity controls
🚀 Faster response to emerging threats through crowd wisdom and AI learning
💎 Economic incentives align user behavior with network security
📊 Transparent records of all threats and validations on-chain
🔓 Reduced dependence on centralized security vendors with outdated databases

💻 For Developers

🤖 Gemini 3 API showcase: Demonstrates real-world AI application in cybersecurity
🌍 Open-source: Full transparency and community contributions
🔌 Extensible: Add new AI models, scanners, or features
📚 Well-documented: Clear setup and contribution guides
🌈 Multi-platform: Works on Chrome, Edge, Brave, Firefox

👥 Who Benefits?

👥 Everyday Users

🛡️ Gemini 3-powered protection while browsing
💸 Passive income through accurate threat reporting
🔐 Control over their security data

🏢 Businesses

👔 AI-enhanced employee protection against sophisticated attacks
📉 Reduced phishing success rates and security incident costs
🌐 Decentralized security posture with global threat intelligence

🔐 Security Researchers

📡 Platform to share threat intelligence with AI validation
💰 Rewards for valuable contributions to the security ecosystem
⭐ Reputation building in the community

💻 Web3 Enthusiasts

🎯 Real-world utility for blockchain technology in security
🗳️ Active participation in decentralized governance
💎 Staking and earning opportunities

🌐 Internet at Large

🤝 Collective immunity through shared, AI-validated threat data
⚡ Faster detection of emerging threats with Gemini 3's reasoning
🌍 Democratized security infrastructure accessible to everyone

⚙️ How It Works

┌─────────────┐
│ 🌐 Browser  │
│ Extension   │◄─── 👤 User browses the web
└──────┬──────┘
       │
       ├─► 🤖 Gemini 3 AI Analysis
       │    • Multimodal content analysis (text + images)
       │    • Advanced reasoning for threat detection
       │    • Context understanding and pattern recognition
       │    • Low-latency real-time decisions
       │
       ├─► 🔍 API Checks (Safe Browsing, AbuseIPDB, Brave Search)
       ├─► 🦠 File Scanning (ClamAV via Rust Engine)
       │
       ▼
   ⚠️ Threat Detected?
       │
       ├─ ✅ No ──► Continue browsing
       │
       └─ 🚨 Yes ──► Block & Report to Smart Contract
                      │
                      ▼
              ┌────────────────────┐
              │ ⛓️ Starknet Contract│
              │  (Pending State)   │
              └────────┬───────────┘
                       │
                       ▼
              🗳️ Community Votes (Validate/Reject)
                       │
                60% Approve?
                       │
         ┌─────────────┴─────────────┐
         │                           │
         ✅ Yes                      ❌ No
         │                           │
         ▼                           ▼
    🎯 Threat Confirmed      🚫 Rejected/Ignored
         │
         ▼
    💰 Rewards Distributed:
       • Reporter: 10 points (0.1 STRK)
       • Voters: 2 points each (0.02 STRK)
       • Premium users: 2x rewards

Gemini 3's Role: The AI brain that analyzes every webpage for threats using advanced reasoning, multimodal understanding, and contextual awareness. All threat detection decisions are powered by Gemini 3's intelligence.

🛠️ Tech Stack

🤖 AI & Machine Learning

Gemini 3: Primary AI engine for threat detection and analysis (multimodal, reasoning-enhanced)
Local LLMs: Privacy-focused alternative for offline analysis

🎨 Frontend

🌐 Extension: Vanilla JavaScript with Chrome Extension Manifest V3
💅 UI: TailwindCSS for modern, responsive design
💾 Storage: Dexie.js (IndexedDB wrapper) for local caching

⚙️ Backend

📜 Smart Contract: Cairo 2.8.0 on Starknet (for reward distribution and threat storage)
🦀 Security Engine: Rust with Tokio async runtime
🖥️ Server: Fastify (Node.js) for contract write proxy
🗄️ Database: MongoDB for event aggregation, SQLite for scan caching
🔌 APIs:
- 🤖 Gemini 3 for AI-powered threat analysis
- 🔍 Google Safe Browsing
- 🚫 AbuseIPDB
- 🔎 Brave Search

⛓️ Blockchain (Reward & Storage Layer)

🌐 Network: Starknet (Sepolia testnet, Mainnet ready)
👛 Wallet Integration: ArgentX, Braavos via get-starknet
💎 Token: STRK for staking and community rewards

🔐 Security

🦠 Antivirus: ClamAV for file scanning
🔐 Hashing: SHA-256 for file integrity
🔗 Native Messaging: Secure browser-to-native communication

🚀 Getting Started

Prerequisites

Before you begin, ensure you have:

Node.js (v18 or higher): Download
Rust (latest stable): Install Rustup
Scarb (Cairo toolchain): Install Scarb
Starknet Foundry (sncast): Install Guide
MongoDB (for backend server): Download
ClamAV (automatic on first run, or manual install)
Starknet Wallet (ArgentX or Braavos browser extension)
Gemini 3 API Key (Required): Get API Key
Git: For cloning the repository

🏗️ Step 1: Deploy Smart Contract

The smart contract manages threat validation, voting, and reward distribution on Starknet.

⛓️ Detailed instructions: See contracts/README.md

Quick Start:

# Navigate to contracts directory
cd contracts

# Build the contract
scarb build

# Create deployment account
sncast account create --network sepolia --name deployer

# Fund account from faucet
# Visit: https://starknet-faucet.vercel.app/

# Deploy account
sncast account deploy --network sepolia --name deployer

# Declare contract
sncast declare --network sepolia --contract-name ZionicDB

# Deploy contract (save the contract address!)
sncast deploy --network sepolia \
  --class-hash YOUR_CLASS_HASH \
  --constructor-calldata YOUR_ADMIN_ADDRESS STRK_TOKEN_ADDRESS

Save your deployed contract address - you'll need it for the extension configuration!

Default Rewards (configurable by admin):

Insert threat: 10 points = 0.1 STRK
Vote on threat: 2 points = 0.02 STRK
Premium users: 2x multiplier
Minimum to claim: 1000 points = 10 STRK

🔧 Step 2: Build Chrome Extension

The extension monitors browsing activity and uses Gemini 3 to scan for threats.

🌐 ```bash

Clone repository (if you haven't already)

git clone https://github.com/mitmelon/zionic.git cd zionic

Install dependencies

npm install

Build CSS with TailwindCSS

npm run build:css

Build extension for production

npm run build

Or for development with auto-rebuild

npm run dev


**Install in Browser:**

1. Open Chrome and navigate to `chrome://extensions/`
2. Enable **Developer mode** (top right toggle)
3. Click **Load unpacked**
4. Select the `dist` folder from your build output
5. Pin the extension to your toolbar for easy access

**Verify Installation:**
- You should see the Zionic icon in your browser toolbar
- Click it to open the dashboard
- You'll be prompted to complete setup on first launch

---

### 🦀 Step 3: Install Rust Security Engine

The Rust engine provides native file scanning via ClamAV and local LLM access.

🔐 **Detailed instructions**: See [`program/zionic_engine/README.md`](program/zionic_engine/README.md)

**Quick Start:**

```bash
# Navigate to engine directory
cd program/zionic_engine

# Build for production
cargo build --release

# Run first-time setup
./target/release/zionic_engine
# (Windows: .\target\release\zionic_engine.exe)

What Happens:

Checks for ClamAV installation (auto-installs on Windows)
Starts ClamAV daemon
Updates virus definitions
Registers native messaging with your browsers
Creates SQLite database for scan caching
Installs LLM model that fits your device
Exposes completion endpoints for extension access

Verify Installation:

# Test the engine
echo '{"action":"ping"}' | ./target/release/zionic_engine
# Should return: {"result":"success",...}

The engine now runs automatically when the extension needs to scan files and access local LLM.

🖥️ Step 4: Start Backend Server

The backend server handles contract write operations and event aggregation.

🚀 Quick Start:

# Navigate to server directory
cd zionic-server

# Create .env file in root directory
cd ..
touch .env  # (Windows: type nul > .env)

Configure .env file (in root directory):

# MongoDB Connection
MONGODB_URI=mongodb://localhost:27017/zionic

# Starknet Configuration
STARKNET_RPC_URL=your_rpc_endpoint
WALLET_PRIVATE_KEY=your_private_key_here
WALLET_ADDRESS=your_account_address_here
CONTRACT_ADDRESS=your_deployed_contract_address_here
NETWORK=sepolia

# Server API Security
API_KEY=your_secret_api_key_here

# Server Configuration
PORT=3000

# STRK token contract address (Sepolia) - same for mainnet too
STRK_TOKEN_ADDRESS=0x04718f5a0fc34cc1af16a1cdee98ffb20c31f5cd61d6ab07201858f4287c938d

Start MongoDB (if running locally):

# Windows
mongod

# macOS (with Homebrew)
brew services start mongodb-community

# Linux
sudo systemctl start mongod

Start the Server:

# From root directory
npm start

# Or for development with auto-reload
npm run devServer

Verify Server:

# Should see:
# Server listening at http://0.0.0.0:3000
# Connected to MongoDB

⚡ Step 5: Configure Extension

Now connect everything together! 🎯

A. Initial Setup

Open Extension: Click the Zionic icon in your browser
Install Page: You'll see the installation welcome screen
Click "Get Started": Proceed to login

B. Connect Wallet

Choose Wallet: Select ArgentX or Braavos
Connect: Authorize the connection request
Sign In: Sign the authentication message
Dashboard: You're now at the main dashboard

C. Configure Gemini 3 API (Required)

This is the most important step! Gemini 3 is the brain of zionic.

Navigate to Settings: Click the gear icon
Enter Gemini 3 API Key:
- Get key: Google AI Studio
- Paste into "Gemini API Key" field
- Click "Save"
Select LLM Type: Choose gemini (recommended for best protection)

D. Configure Optional APIs

Enhance protection with additional data sources:

Google Safe Browsing: Get key
AbuseIPDB: Get key
Brave Search: Get key

E. Configure Server Connection

Server URL: Enter your server URL (e.g., http://localhost:3000)
Server API Key: Enter the API_KEY from your .env file

This enables blockchain reward distribution for validated threats.

F. Enter src/starknet.js

If you deployed your own contract:

Open the extension's starknet.js
Update the contract address to your deployed address and RPC
Save and rebuild the extension

💰 Earning Rewards

Once configured, Zionic automatically protects you with Gemini 3 AI and earns rewards! 🎉

🎯 How to Earn

🌐 Browse Normally: Zionic monitors in the background
🤖 Gemini 3 Analysis: AI analyzes and blocks suspicious sites using advanced reasoning
📝 Auto-Report: Threats are submitted to the Starknet smart contract
🗳️ Community Votes: Other users validate your AI-detected findings
💎 Earn STRK: Get blockchain rewards when threats are confirmed

🗳️ Voting on Threats

📊 Dashboard: View pending threats requiring validation
🔍 Review: Check threat details, URLs, and Gemini 3 analysis
✅ Vote: Approve (valid threat) or Reject (false positive)
💰 Earn Points: 2 points per vote when you're in the majority

Reward Structure

Action	Points	STRK Value	Requirements
Report threat	10	0.1 STRK	Threat approved by community
Vote on threat	2	0.02 STRK	Vote with majority
Stake tokens	Varies	-	Unlock voting rights
Premium status	2x	-	Set by admin

Minimum to Claim: 1000 points (10 STRK)
Approval Threshold: 60% of votes must be positive

Staking for Access

To report threats and vote, you must stake STRK:

Minimum Stake: 10 STRK
Lock Period: 30 days
Purpose: Prevents spam and malicious reports
Withdrawal: Available after lock period

📁 Project Structure

zionic/
├── contracts/              # Starknet smart contract (reward distribution)
│   ├── src/
│   │   └── lib.cairo      # Main contract code
│   ├── Scarb.toml         # Contract dependencies
│   └── README.md          # Contract build & deploy guide
│
├── program/
│   └── zionic_engine/    # Rust security engine
│       ├── src/
│       │   └── main.rs    # Native messaging & ClamAV
│       ├── Cargo.toml     # Rust dependencies
│       └── README.md      # Engine build guide
│
├── src/                   # Chrome extension source
│   ├── background.js      # Service worker
│   ├── content.js         # Content script (page scanning orchestration)
│   ├── dashboard.js       # Dashboard UI logic
│   ├── starknet.js        # Blockchain interactions
│   └── images/            # Icons and assets
│
├── dist/                  # Built extension (after npm run build)
├── zionic-server/       # Backend server (contract write proxy)
│   └── server.js
├── manifest.json          # Extension manifest (Manifest V3)
├── package.json           # Node dependencies
└── README.md              # This file

🤝 Contributing

We welcome contributions! Here's how:

Fork the repository
Create a feature branch (git checkout -b feature/amazing-feature)
Commit your changes (git commit -m 'Add amazing feature')
Push to the branch (git push origin feature/amazing-feature)
Open a Pull Request

Areas for Contribution

🤖 Enhanced Gemini 3 prompts for better threat detection
🌐 Multi-language support
🎨 UI/UX improvements
🔐 New security scanner integrations
📖 Documentation enhancements
🐛 Bug fixes and optimizations

🏆 Why Zionic for Gemini 3?

Gemini 3 is the core intelligence that makes Zionic revolutionary:

🧠 Advanced Reasoning: Gemini 3's enhanced reasoning capabilities power sophisticated threat pattern recognition that goes beyond simple keyword matching
🖼️ Multimodal Analysis: Combines text, visual, and structural analysis to detect threats that fool traditional single-mode scanners
⚡ Real-Time Performance: Low-latency analysis ensures protection without compromising browsing experience
🎯 Novel Application: Demonstrates Gemini 3 in a critical real-world use case (cybersecurity) beyond chat interfaces
🌍 Social Impact: Protects everyday users from financial fraud, identity theft, and malicious content

Starknet's Role: Provides decentralized storage for threat intelligence and reward distribution, creating economic incentives for community participation. The blockchain layer is purely for rewards and data persistence—Gemini 3 is the brain that makes all security decisions.

Troubleshooting

Extension Not Working

Check Gemini 3 API key: This is required! Go to Settings and verify your API key is saved
Check wallet connection: Ensure ArgentX/Braavos is installed and connected
Reload extension: Go to chrome://extensions/ and click reload

Gemini 3 API Issues

Rate limits: Free tier has limits, upgrade if needed
Invalid key: Regenerate key from Google AI Studio
API errors: Check browser console for detailed error messages

Rust Engine Issues

ClamAV not starting: Manually install ClamAV for your OS
Port 3310 busy: Another ClamAV instance is running, restart it
See program/zionic_engine/README.md for detailed troubleshooting

Roadmap

License

This project is licensed under the ISC License. See individual components for specific license details:

Smart Contract: MIT License
Rust Engine: Check source file headers
Extension: ISC License

💬 Support & Community

🌐 Website: zionic.work.gd
🐛 GitHub Issues: Report bugs
📖 Documentation: See component READMEs for detailed guides
- 📜 Smart Contract: contracts/README.md
- 🦀 Rust Engine: program/zionic_engine/README.md

🙏 Acknowledgments

Built with:

🤖 Gemini 3 (Google DeepMind) - The AI brain powering all threat detection
🦀 Rust & Tokio
🏛️ Cairo & Starknet (for decentralized rewards)
🛡️ ClamAV
⚡ Node.js & Webpack
🎨 TailwindCSS

🌐 Visit zionic.work.gd · Start protecting the web with Gemini 3 AI and earning rewards today! 🚀

Name		Name	Last commit message	Last commit date
Latest commit History 2 Commits
asset		asset
contracts		contracts
dist		dist
program/zionic_engine		program/zionic_engine
src		src
test		test
zionic-server		zionic-server
.gitignore		.gitignore
README.md		README.md
babel.config.json		babel.config.json
manifest.json		manifest.json
package.json		package.json
tailwind.config.js		tailwind.config.js
webpack.config.js		webpack.config.js

mitmelon/zionic

Folders and files

Latest commit

History

Repository files navigation