SignSafe
●
Live Demo — SignSafe
1 / 3
SignSafe
Three deceptive attacks.
All caught.
Real Solana transactions on devnet. Each one is malicious — designed to look routine to a generic wallet. SignSafe inspects transaction semantics before your wallet signs.
Airdrop Claim
Wormhole Bridge
Kamino LP Unlock
Press → or Space to begin
ST
Superteam Drops
✓ Verified
Connect wallet to check eligibility
Epoch 742 · 12,847 eligible wallets
50
SAFE
≈ $34.80 at current price
12,847 claimed
15,000 total
Claim window closes in
23:41:07
DANGER
system_assign
- A new account is created; ownership is reassigned to another program.
- You pay rent (~0.002 SOL). The marketed airdrop is not what the instructions do.
- Memo says eligibility; on-chain path includes
assign.
SignSafe blocked this before the wallet opened.
🌀
Wormhole Portal
Guardian-approved
You send
0.5 SOL
≈ $72.50
→
To
Ξ
ETH
▾
Relayer fee
0.0013 SOL ≈ $0.19
Network
Solana → Ethereum
Est. finality
~15 minutes
$7.4B
Total bridged
99.8%
Uptime
~15m
Finality
19/19 Guardians
Non-custodial
Insured
DANGER
hidden_instruction
- Step 1 posts a 0.0013 SOL “relayer fee” alongside bridge initialization.
- Step 2 auto-fires 0.5 seconds later with the same 0.0013 SOL fee framed as relay confirmation.
- Repeating the same small fee twice makes the second transfer easy to dismiss as expected bridge behavior.
SignSafe blocked this before the wallet opened.
🌾
Kamino Finance
OtterSec ✓
kSOL Vault v2
One-time protocol approval required
18.4%
Current APY
$142M
TVL
DANGER
spl_delegate
- Tokens are minted to your wallet — then immediately delegated to the attacker's address.
- The approval amount matches your deposit exactly, making it look like standard vault access.
- The attacker can drain your tokens at any time after you sign.
SignSafe blocked this before the wallet opened.
✅
SignSafe flags all three patterns.
system_assign
Airdrop Claim
hidden_instruction
Wormhole Bridge
spl_delegate
Kamino LP Unlock
Wallets summarize balance changes; SignSafe inspects instruction semantics before you sign.