Pre-Sign Permission Scope Reader

WHAT IT DOES

Pre-Sign Permission Scope Reader reads pending transaction data from your wallet or a transaction hash, detects permission-granting functions including approve, setApprovalForAll, and permit, and extracts the contract address, spender address, and amount or scope of the permission. It decodes the function call, parses the arguments, assesses the risk level of the permission being granted (high, medium, or low), and generates an AI explanation of what scope of permission is being granted, to whom, for which assets, and what risks to consider before signing.

HOW TO USE

When your wallet prompts you to sign a permission-granting transaction (approve, setApprovalForAll, permit), copy the transaction hash from your wallet or the requesting dApp. Open the Pre-Sign Permission Scope Reader, connect your EVM wallet, and paste the transaction hash into the input field. Click "Look up transaction" to fetch the details and generate a permission scope analysis. Alternatively, click "Manual entry" to enter the token/NFT contract address, spender address, amount, and function type directly. The tool will display the contract address, spender, amount/scope, function name, and a risk assessment. Review the AI explanation to understand what permission you are granting and whether the risk is acceptable.

TECHNICAL SECTION — PERMISSION DETECTION AND SCOPE PARSING

The tool fetches transaction data from the blockchain using the connected wallet's provider. It detects permission-granting functions by matching the function signature against a lookup table of known signatures for approve (0x095ea7b3), setApprovalForAll (0xa22cb465), and permit (0xd505accf). For each detected function, the tool parses the arguments from the calldata. For approve and permit, it extracts the spender address (first 32 bytes after the signature) and the amount (next 32 bytes). For setApprovalForAll, it extracts the operator address and the boolean approval value. The tool then assesses the risk level: setApprovalForAll with unlimited approval is flagged as high risk, large approvals are medium risk, and specific limited approvals are low risk. The AI layer receives the decoded data and generates a plain-language explanation. This approach helps you understand the scope of permissions before you sign.

WHAT IT CANNOT SEE

This tool cannot read the actual intent behind a permission-granting transaction. It cannot determine if the spender address is malicious without an external database. It cannot detect contracts that mimic legitimate spenders. It cannot predict how the spender will use the permission after it is granted. It cannot detect if the permission has already been revoked at the time of the check. The user must still verify the transaction details in their wallet before signing. The AI explanation is generated from on-chain data and does not constitute financial advice or a security guarantee.

PLEASE NOTE

EVM chains only. Explanations are AI-generated from data the app reads on-chain—always review what you are actually signing in your wallet before approving it. The wallet's own signature prompt remains the final and only protection against unwanted transactions. This tool is read-only; it never sends transactions or signs anything on your behalf.