Signature Prompt Deep-Dive Tool

WHAT IT DOES

Signature Prompt Deep-Dive Tool gives you a comprehensive understanding of any transaction before you sign. It decodes the function signature, extracts and explains every parameter, simulates the transaction to see if it would succeed or fail, flags suspicious patterns, and provides a clear risk assessment. The AI translates all of this into a plain-English deep-dive—what the transaction is asking you to sign, what the function does, what each parameter means, what permissions are requested, what assets are affected, whether the simulation succeeded, and whether you should be concerned. All before your wallet ever asks for a signature.

HOW TO USE

Connect your EVM wallet using the BotGentz wallet bridge. Select the network matching your transaction. Paste a transaction hash to fetch and analyze the full transaction, or paste raw hex call data to decode it directly. Click "Deep Dive"—the tool decodes the function, simulates the transaction via eth_call, flags risks, and generates an AI explanation. Results show you the risk level, simulation status, sender, recipient, value, function name, decoded parameters, risk flags, and a comprehensive plain-English deep-dive. No transaction is ever submitted—this tool is read-only and free.

TECHNICAL MECHANISM

The app uses the injected BGWallet bridge to access the EVM provider via ethers.js v5.7.2. Transaction hashes are fetched via provider.getTransaction(). Call data is decoded against a built-in 4-byte signature database covering common functions (ERC20 transfer/approve, ERC721 safeTransferFrom, mint, owner, transferOwnership, pause, withdraw, selfdestruct, and more). Parameter decoding extracts addresses (padded to 64 hex chars), uint256 values, and booleans. A dry-run simulation is performed using provider.call() with the transaction data, capturing revert reasons if the call fails. Risk flags are generated based on the decoded function, parameters, and value—unlimited approvals, ownership changes, self-destruct, large transfers, and withdraw functions. The AI bridge (BGAI.generate) receives a comprehensive prompt with the decoded data, simulation results, flags, and risk level, and returns a plain-English deep-dive explanation capped at 1,024 tokens. The risk level is determined by the most severe flag detected, ranging from low to critical.

WHAT IT CANNOT SEE

This tool cannot detect malicious intent hidden in contract bytecode—it reads only the function call data visible on-chain. It cannot verify that the resolved function name from the signature database matches the actual contract implementation—any contract can implement a function with the same method ID but completely different behavior. It cannot verify off-chain intent or consequences. It cannot detect cross-contract exploits, reentrancy vulnerabilities, or front-running attempts. It cannot guarantee that simulation results match actual execution—state can change between simulation and submission. The AI deep-dive is generated from the provided data and may miss nuanced attack patterns not present in the call data itself.

PLEASE NOTE

Supports EVM-compatible chains only—Ethereum, Sepolia, Polygon, Mumbai, Optimism, Arbitrum, and any network the wallet bridge connects to. The signature database is built-in and covers the most common functions—if a function is not in the database, the tool will show the method ID and raw data but cannot provide a function name. Simulations are estimates based on current state. Deep-dives are AI-generated and should be treated as assists, not authoritative audits. Always review the transaction details in your wallet's own signature prompt before approving. The wallet's signature step is the only protection that actually gates any action—this tool is informational and does not replace that safeguard. Free to use, no API keys required.