Know what you're
signing.
Paste your Squads vault. TxScope parses, simulates, decodes, and calibrates each pending proposal into a signer-facing threat report before anyone approves it.
Built for protocol security councils, DAO treasuries, and anyone who wants the moment of signing to be reviewable instead of blind.
A single Squads proposal handed protocol admin to a 1‑day‑old wallet and queued it as a non-expiring nonce. Every red flag was detectable before any signer approved.
What TxScope detects
The public story is simple: control changes, value movement, program trust, exploit-shape correlation, and unresolved ambiguity all feed a calibrated verdict.
From paste to verdict in under two seconds.
TxScope is a read-only interpretation layer for Solana multisigs: parse the transaction, simulate live state, apply protocol knowledge, and emit a calibrated report.
Accept a Squads URL, vault address, or raw base64 transaction and resolve the signer-facing execution context.
Run the transaction against current mainnet state and extract the state diff, CPI tree, and execution metadata.
Apply protocol knowledge, structural findings, and exploit-shape correlation without hiding uncertainty.
Emit a calibrated verdict, concrete evidence to verify, and a report a signer can actually inspect.
Why technical skeptics take it seriously.
The claim is not “trust our model.” The claim is that the product exposes enough evidence, replay proof, and calibration discipline to audit the result.
Historical incident families guaranteed to land at least CAUTION in the enforced replay baseline. Current regenerated artifacts are stronger on 5 of those cases.
Solana catalog patterns with full or partial coverage, computed from the shipped registry.
Tracked programs across curated protocol families, with bundled IDLs where available.
What TxScope is — and isn't.
Audits verify code at one point in time. A $100K audit wouldn't have caught the Drift hack — the code wasn't the problem, the signers were. TxScope verifies every transaction, every time, at the moment of signing.
Consumer wallet tools flag scams and phishing sites. They don't understand multisig governance: durable nonces, authority transfers, withdrawal guard manipulation, oracle changes. TxScope is built for the governance layer where nine-figure decisions are made.
TxScope never holds keys, never signs transactions, and never has write access to anything on-chain. We simulate the transaction against mainnet and report what we find. That's it.
The strongest positive signal TxScope gives is “No Known Threats Detected in Simulation.” We tell you what we found — you decide whether to sign. Simulation is a prediction, not a guarantee.
Operationally dangerous transactions at the moment of signing: non-expiring approvals, authority handoffs, suspicious value movement, exploit-shape correlations, and unresolved execution paths. Audits and TxScope solve different problems.
External transaction monitoring is a recommended security control under the Security Alliance (SEAL) framework. TxScope fills this role for Solana multisigs.
Your next proposal could be the one.
Free for on-demand scans. Sentinel monitors every pending proposal automatically, with instant Telegram and Slack alerts.