Check Before Signing or Sending (Crypto)
crypto_check_before_signBefore an agent signs or sends from a crypto wallet: send the destination address (to), the page that asked (url) and/or the wallet request it is about to approve (request: the EIP-1193 method and params). The address is checked for its chain and checksum, the US Treasury OFAC sanctions list, and pages DechoNet judged dangerous that showed it; the page goes through the phishing link check and the official exchange, wallet and dApp list; the request is read for what approving it would allow (unlimited token approval, approval for a whole NFT collection, Permit/Permit2 signatures, Seaport orders, raw eth_sign, transfers). Verdicts: danger, suspicious, no_signals. no_signals means none of the checks found a warning sign and is not a statement that the transaction is harmless; 'unchecked' lists what was not looked at (balances, token contracts, simulation). Nothing sent is stored. Rate-limited.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| to | No | Destination wallet address (0x…, T…, bc1…, Solana) | |
| url | No | Address of the page that asked for the signature or transfer (https://…) | |
| request | No | The wallet request about to be approved |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
| request | No | What approving the request would allow | |
| signals | Yes | ||
| verdict | Yes | danger: a check found a danger sign; suspicious: a warning sign; no_signals: none of the checks found one — not a statement that the transaction is harmless (see unchecked) | |
| receipts | No | Signed observation receipts behind this result, one per lookup: when, from where and under which rules version DechoNet observed it. Each url shows the record and checks its Ed25519 signature. | |
| unchecked | Yes |