ShieldForge — Web3 Approval Scanner & Permit Decoder

Audit token approvals on 88 chains. Decode EIP-712 permits before signing. Spot phishing on dApps. Self-custodial wallet.

ShieldForge brings the Web3 approval scanner and EIP-712 permit decoder into your browser toolbar. **Self-custodial** — no keys held, no custody, no relayer. Wallet signing always happens in your wallet's own UI. ### What it does - 🔍 **Scan token approvals across +95 chains** — Ethereum, Base, Arbitrum, Polygon, BNB Smart Chain and more.. - ✍️ **Decode EIP-712 typed-data signatures** before you sign — Permit2, EIP-2612, OpenSea listings, Permit. Plain-text breakdown of domain, message, primary type. Warnings when value = 2^256-1 (unlimited allowance). - 🛡️ **Phishing watch on dApps** — when a dApp asks for a typed-data signature with a permit-shaped payload, a non-blocking floating banner offers a one-click decode. Excludes banking domains, Google login, ShieldForge web app. - 📊 **Local scan history** — past scans stored in `chrome.storage.local`, never uploaded. - 🔔 **Weekly hygiene reminder** (opt-in) — browser notification if your last scan showed unrevoked CRITICAL approvals more than a week ago. - 🌍 **5 languages** — English, Español, 日本語, Русский, 中文 — auto-detected from browser locale. ### Privacy We never read wallet keys or send PII. The scanner API receives the wallet address you scan (a public on-chain identifier) along with standard HTTP request metadata. Full policy at https://shieldforge.xyz/privacy. ### Why we built this Most token-approval drains in 2026 happen via blind EIP-712 signatures. Standard wallet UIs show "Sign typed data?" without explaining what it means. ShieldForge fills that gap — decode before you sign, audit before you forget, revoke before it costs you. Backed by the same scanner running at https://shieldforge.xyz across +95 chains. A longer explanation of features, functionality, and other relevant information. This field is only displayed on the add-on's product page.