Free security tools
Read-only checks on public chain data. Nothing to connect, nothing to sign, and we keep nothing you type.
Check a job interview coding task
Fake recruiters send coding tests that steal passwords and wallets the moment you open or install them. Paste the repository or npm package before you run it. We read it without running it and list what we find.
Is this address flagged?
Checks sanctions lists and public theft reports.
Lookalike domains
Names a phishing site for your domain would likely use, and which are already registered.
Token approvals
Every app your wallet still lets spend its tokens, and the call that takes the permission back.
Safe health check
Who can move a Safe's funds, and what has changed.
Wallet delegation (EIP-7702)
Whether a wallet has handed its calls to a contract, which contract, and the authorization that takes it back.
Check a Safe transaction before you sign
Paste the transaction your wallet asks you to sign. This page works out what it really does, and the hashes your signing device should show, without trusting the wallet screen.
In February 2025 Bybit lost about 1.5 billion dollars this way: its signers approved what looked like a routine transfer, but the transaction was a delegate call that handed control of the wallet to the attacker. This check flags a delegate call like that before you sign.
Read-only. No account, no cost. We never hold a key.
- Network
- Operation
- Gas and refund fields
Addresses this Safe has paid before, one per line. Used only to spot a look-alike address.