Your wallet shows a wall of hex. This shows what you are actually authorising — who gets permission, how much, and for how long.
Runs entirely in your browser. Nothing you paste is sent anywhere — turn off your internet and it still works.
Loading reference data…
permit, Permit2 and marketplace orders cost no gas, create no pending transaction and
never appear in your history. Nothing visibly happens when you sign one — the tokens move later,
whenever the holder of that signature decides. That silence is why approval phishing works.
Hardware wallets can show a readable summary, but only for contracts that publish metadata. The official Ethereum registry covers about 51 projects. For everything else your device shows a hash and you are signing blind.
It renders the official metadata where it exists, names the shape of the request where it does not, and points out unlimited amounts and missing expiry dates. It cannot know intent. It tells you what the request does — the decision stays yours.
Off-chain signatures such as permit, Permit2 and marketplace orders are gasless. They
create no pending transaction and never appear in your transaction history, so nothing visibly
happens when you sign one. The tokens move later, whenever the holder of that signature chooses.
That silence is why approval phishing works.
Hardware wallets can display a readable summary only for contracts that publish clear-signing metadata to the ERC-7730 registry, which currently covers around 51 projects. For every other contract the device shows a hash and you are signing blind.
An unlimited approval sets the allowance to the maximum value the field can hold, letting the spender move that token from your wallet without any further prompt. Combined with a deadline that never expires, the permission stays live until you revoke it.
This tool decodes entirely in your browser. There is no server, no logging and no wallet connection, and you can disconnect from the internet after the page loads and it still works. It also never tells you whether a request is safe, because it cannot know intent — it only describes what the request does.
A hardware wallet keeps your keys off a computer that may already be compromised, and shows you the request on a screen malware cannot repaint. That is a genuinely different level of protection from anything a website can offer you — including this one.
Affiliate links: buying through them earns this site a commission at no extra cost to you. It changes nothing about what the tool tells you.
The tool is free, has no accounts and no tracking, and will stay that way. If it saved you from signing something you would have regretted, you are welcome to send a little back.
Any EVM chain — Ethereum, Base, Arbitrum, Optimism, Polygon
0x3392Fd42E1a7355D96C8F3D2FDcf320abD0C8887
