SolDecode - Solana Transaction Preview

SolDecode shows you what a Solana transaction will actually do before you sign it. Every wallet prompt becomes a preview drawer that explains, in plain English: • Which tokens leave and enter your wallet, and exactly how much of each • Which programs the transaction will execute, in order • The estimated network fee and compute units • The calling site's URL, so you can confirm it matches the dApp you think you're on ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ WHAT IT CATCHES ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Impersonator tokens - detects fake USDC, USDT, SOL, JUP, BONK, WIF, JTO, RAY, PYTH, and W tokens at mint addresses that don't match the real ones. Hardened against Unicode homoglyph bypasses including Cyrillic lookalikes (USDС), Greek lookalikes (PΥTΗ), fullwidth forms, and zero-width joiner insertion. Drainer heuristic - flags transactions that move most of your balance out in one shot. Multi-asset outflows - catches coordinated drains where SOL leaves alongside one or more SPL tokens. Unlimited approvals - warns when a transaction grants an open-ended delegate on one of your token accounts. Account ownership hijacks - detects AssignWithSeed and similar System Program tricks that silently reassign account ownership. Mint, freeze, and stake authority changes - flags authority transfers and captures that can brick your tokens or reroute your stake. Sub-dust SOL receipts - detects incoming transfers below 0.001 SOL, a common address-poisoning setup pattern. Lookalike destinations - catches poisoned copy-paste addresses that share first and last 4 characters with an address you've already sent to. Surprise mints and surprise SOL - after you sign, SolDecode polls the signature and compares the finalized transaction against the simulation at a 5% threshold. If the actual result contains tokens that weren't in the preview, or unexpected SOL movement, you get a non-blocking toast alert. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ TRUSTED RECIPIENTS ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Every address you've successfully sent to is added to a local contacts list so the lookalike-destination detector knows which addresses are really yours. Inspect the list or clear it at any time from the popup. The list never leaves your device. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ CONFIGURABLE SAFETY ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Simulation timeout - set between 10 and 120 seconds to match your RPC provider. If simulation hasn't finished by the deadline, SolDecode fail-closes and rejects the transaction rather than letting it through silently. Crashed or stalled service workers cannot become a silent bypass. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ SUPPORTED WALLETS ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Phantom, Jupiter, Solflare, Backpack - all verified working through the Wallet Standard sign request interception path. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ PRIVACY ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ Fully local. No analytics, no telemetry, no tracking. The only outbound network traffic is the Solana RPC simulation request to the endpoint you configure yourself (Helius by default). Your keys, wallet state, and browsing history never leave your machine. We do not operate any servers. ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ OPEN SOURCE ━━━━━━━━━━━━━━━━━━━━━━━━━━━━ GPL-3.0. Every line of code is auditable: https://github.com/jvr0x/soldecode-extension Landing page: https://jvr0x.github.io/soldecode-extension/