SignLens (beta) by Boris Onchev

SignLens explains, in plain words, each Solana transaction a dapp asks you to sign, before your wallet signs it, and says so when it cannot.

Your wallet's preview shows what leaves your wallet. SignLens says where it goes and what it is for: a deposit into a lending market, a liquidity position, a stake, a leveraged order, or a drain.

How it works

• In a dapp, connect SignLens as your wallet. SignLens connects, in turn, to the wallet you already use: Phantom, Backpack, Solflare or another Solana wallet.
• Each request opens the SignLens window first: the verdict (OK, Warning or Blocked), what the transaction does, and what SignLens found.
• Continue, and the exact transaction SignLens explained goes to your wallet, which asks you as usual. SignLens holds no keys and signs nothing.

What it warns about

• An account or a whole wallet handed to someone else, which moves nothing when you sign
• Spending rights, an unlimited one spelled out
• Signatures that never expire (durable nonces)
• Addresses that only look like yours or a contact's
• Programs it has no reviewed description of, blocked rather than guessed
• Multisig approvals, with the proposal's steps read from your RPC
• A swap that pays someone else

What it sends

In this beta the explanation is computed by SignLens's server, api.signlens.dev. Each transaction you are asked to sign goes there, with the addresses it loads, a simulation's outcome, the accounts it names as your RPC returned them, your addresses and the addresses in your address book, so that the explanation can say "you" and tell your contacts from lookalikes; the names in your address book stay in your browser. The server keeps verdicts and finding codes, not the transaction. Your RPC, by default solana-rpc.publicnode.com, is asked for what the transaction refers to and simulates it. A rating sends nothing until you give one, and the site and SignLens's version only once you allow them. The privacy policy below, and https://signlens.dev/privacy, say it all.

Solana mainnet, on a computer. Open source under the Apache 2.0 licence, and built reproducibly: https://github.com/signlens/signlens-extension

SignLens is not affiliated with the wallets and projects whose programs it explains.