wardcrest

Safe transaction checker

Paste a Safe address to see, in plain language, what every transaction waiting for signatures will do. Wardcrest decodes batches, flags delegatecalls, owner and module changes, unlimited approvals and gas-refund tricks, and recomputes each transaction hash itself. The check that would have exposed the Bybit transaction.

Questions

Does the checker need my wallet or keys?

No. It only needs the Safe’s public address. Wardcrest reads the Safe’s state from the chain and its pending proposals from the Safe Transaction Service; nothing is signed and nothing is stored against the address.

Why recompute the transaction hash?

Signers approve a hash, not the preview a website shows them. Wardcrest rebuilds the hash from the transaction’s actual fields and flags any proposal whose reported hash does not match what would execute.

What gets flagged as critical?

Delegatecalls, owner and module changes, unlimited token approvals and gas-refund tricks. Confirm any of them with the proposer through a separate channel before adding your signature.