Proof of Audits
Back to Proof of Audits

Browser extension in testing

Know before you approve.

Your wallet shows an address and asks you to continue. This add-on checks the live contract first: did the code change, who can change it, and can you get money out.

If something deserves your attention, you get a warning before your wallet opens. You still decide what to do.

Free during testing. Name, email, and why you want it. Cannot touch your money.

Proof of AuditsStopped before your wallet

You are about to

Deposit 10,000 USDC

Function: put money in. Two actions in this request.

What we found

Looks consistent

The code running today matches the version covered by the linked reviews.

Review score

812 / 900

Who can change it

3 of 5 people

Can you leave?

Withdrawals are open

Who checked this function

Asha Rao, public inbox listed

Your wallet opens after this check. You still make the decision. Example only.

What the wallet shows

Deposit 10,000 USDC

to 0x0c77a31f...d894

An address, an amount, and a button to continue. That is the whole screen for many people.

What that screen does not say

  • The code running today is not the version reviewers checked.
  • One wallet can stop withdrawals.
  • This request also lets the app move as many tokens as it wants.

See what shows up before you approve.

Pick an example. The add-on starts with a clear answer, then shows the function you are using, who checked it, whether the live code still matches, who can change it, and whether you can leave.

app.aave.com

Wallet transaction request

Before your wallet opens

Supply 10,000 USDC

to 0x0e76f12d07...53beb3

Looks consistent

Strong review record

The code running today matches the version covered by the linked reviews.

See the evidence

Example only. This is not a live result.

What we found

Looks consistent

The code running today matches the version covered by the linked reviews.

Review score

812 / 900

Higher means we found more current records we could check. It does not mean risk free.

The function you are using

Put money in

supply

Moves your 10,000 USDC into the pool and records your deposit.

Action score 74 / 100

3 public reviews covered this version of the function. 3 of those 3 match the body running now.

Who checked this function

  • Asha Rao

    Wrote the public explanation of this function

    asha@example.com

    Example public contact. Private inboxes stay hidden.

Who else checked the protocol

  • OpenZeppelin

    Public review of the protocol

    Public report linked. No personal inbox listed.

  • Trail of Bits

    Public review of the protocol

    Public report linked. No personal inbox listed.

  • Sigma Prime

    Public review of the protocol

    Public report linked. No personal inbox listed.

Is it still the same?

Same version reviewed

The code running today matches the version covered by the linked reviews.

Can you leave?

You can withdraw

In this example, withdrawals are open and no one can stop every exit.

Who can change it

Important changes need more than one person to agree.

Update the contractChecked
Pause activityChecked
Change price feedsWatched
Move shared fundsChecked

Several actions at once

This request includes 2 actions

Some apps send more than one action in a single wallet request. Check each one before you continue.

  1. 1

    Allow the app to move 10,000 USDC

    USDC token

  2. 2

    Put 10,000 USDC into the pool

    Aave V4 pool

We did not add a warning to this example. The code, control, and exit records agree with each other.

How this helps when you are about to click

The add-on is for the moment your wallet opens. It does not replace a review. It shows the current record for the contract you are about to use.

You are about to put money in

The add-on stops first and tells you whether the code running today is the version reviewers checked, and whether withdrawals look open.

You are about to let an app spend your tokens

You see the function being called, who checked that function, and whether one wallet can freeze or move funds.

The site looks familiar

A copied site can point at a different contract. The add-on compares the live code with the reviewed version before your wallet opens.

Your wallet grouped several actions

Some apps send two or three actions in one request. You see each action, not only the last line on the wallet screen.

Know where the check stops

It does not cover message signing yet

Some scams ask you to sign a message instead of sending a transaction. The extension does not step in for those requests yet.

No information does not mean safe or unsafe

If we do not have enough information, we say that clearly. We will not fill an empty record with a green result.

A good result is not a promise

It means the records we checked agree with each other. Reviewers can miss problems, and a contract can still carry risk.

Your wallet stays in charge

The extension cannot send money, approve a transaction, or see your private keys. It can only show information before your wallet opens.

What it sends when you make a check

It sends the contract address, the network, and the action you are about to take. It does not send your private keys, recovery phrase, wallet address, or browsing history.

Join the waiting list

The add-on is still being tested, so there is no public download yet. Leave your name, email, and why you want it. We will invite a small group first.

We use your email to send the testing invite. Your answer helps us choose which warnings to work on first.

Join the waiting list

Name, email, and why you want it. We use your answer to choose testers and decide what to build first.

This helps us understand what people need before we decide what ships first.

We use these details only for extension research and testing invitations. No newsletter and no sharing with anyone else.