What-Am-I-Signing Checker

WHAT IT DOES

What-Am-I-Signing Checker takes any Ethereum transaction—by hash or raw data—and tells you exactly what it does in plain English. It decodes the function signature, extracts all parameters, shows the value being transferred, and flags suspicious patterns like unlimited approvals, ownership changes, self-destruct calls, and withdraw functions. An AI layer then translates the technical transaction data into a clear, human-readable explanation of what permissions the transaction requests, what assets are affected, and what the actual consequences are. You get this information before your wallet ever asks for a signature—so you know what you're approving, not after the fact.

HOW TO USE

Connect your EVM wallet using the BotGentz wallet bridge. Select the network matching your transaction. Paste a transaction hash to fetch and decode the full transaction details from the chain. Or paste raw call data (hex starting with 0x) to decode it directly without fetching from the chain. Click "Check"—the tool decodes the function, extracts parameters, flags any risks, and generates an AI explanation. The results show you the function name, parameters, value, gas settings, and any detected risk patterns, followed by a plain-English explanation of what the transaction actually does. No transaction is ever submitted—this tool is read-only.

TECHNICAL MECHANISM

The app uses the injected BGWallet bridge to access the EVM provider via ethers.js v5.7.2. Transaction hashes are fetched via provider.getTransaction(), returning the full transaction object including to, from, value, data, gasLimit, nonce, and chainId. The call data is then decoded against a built-in signature database of common functions (ERC20 transfer/approve, ERC721 safeTransferFrom/transferFrom, mint, owner, renounceOwnership, transferOwnership, pause, unpause, withdraw, selfdestruct, setApprovalForAll, and more). For each signature, the tool parses parameters using regex on the hex data—extracting addresses (padded to 64 hex chars), uint256 values, and booleans. A risk flagging system checks for known dangerous patterns: unlimited approvals (0xffff... in approve data), ownership transfers, self-destruct, large value transfers, and admin functions. The AI bridge (BGAI.generate) receives a prompt containing the decoded function name, parameters, value, raw data, and detected flags, and returns a concise plain-English explanation capped at 1,024 tokens.

WHAT IT CANNOT SEE

This tool cannot detect malicious intent hidden in contract bytecode—it reads only the transaction data visible on-chain. It cannot verify off-chain consequences of a transaction, such as what a contract might do with tokens after receipt or whether the contract's owner can upgrade it later. It cannot guarantee the contract source code matches the bytecode on-chain. It cannot detect cross-contract attack vectors, reentrancy vulnerabilities, or front-running attempts. It cannot verify that the displayed function signature matches the actual contract implementation—a malicious contract could implement a function with the same signature but different behavior. It does not simulate transaction execution, so it cannot predict revert conditions or gas exhaustion. The AI explanation is generated from the provided data and may miss nuanced attack patterns not present in the call data itself.

PLEASE NOTE

Supports EVM-compatible chains only—Ethereum, Sepolia, Polygon, Mumbai, Optimism, Arbitrum, and any network the wallet bridge connects to. Explanations are AI-generated and should be treated as assists, not authoritative audits. Always review the transaction details in your wallet's own signature prompt before approving. The wallet's signature step is the only protection that actually gates any action—this tool is informational and does not replace that safeguard. Free to use, no API keys required.