Zafu — Zero-trust Address Framework for Users

Catches address poisoning and clipboard hijacking before you send. Works on wallet and exchange sites. Never touches your keys.

Zafu — Zero-trust Address Framework for Users Sending crypto still asks you to trust a tiny paste field with irreversible money. Zafu gives every transfer one final address check before you send. What it does: When you paste a crypto address on any wallet or exchange, Zafu checks it before it reaches the input field. In under 200ms, it runs nine detection checks and shows the full address in readable chunks: Copy/paste match: is this still the address you copied? Address poisoning: is this a near-identical fake designed to fool your eyes? Scam signals: does it match known scam databases or community reports? Trusted contact: have you sent value to this address before? Transfer Check is on by default. It shows a final review before paste: copied-address match, threat signals, field context, and the full segmented address. Works across wallet and exchange websites: Zafu is cross-platform. It activates on wallet and exchange websites — wherever you paste a crypto address. Your protection is not tied to a single product. Your address book, secured: Zafu automatically builds a trusted address index from your transaction history. Addresses you've sent to before are recognized instantly. Addresses that look similar but are slightly different trigger a poisoning alert. Privacy-first by design: - Local-first storage for your wallet list, labels, and trusted contacts - Optional Google Sign-In backs up your address book, trusted contacts, labels, and notes - Optional community threat intelligence shares suspected attacker addresses and signal types only when users manually report them or opt in to automatic threat signals - No analytics, no tracking, no browsing history access - Never touches your private keys or seed phrases - Public Chrome extension source: github.com/jimozo/zafu-extension Transfer Check: Transfer Check is free and on by default. Before the address reaches the field, Zafu shows you the threat signals it ran, the full segmented address, and confirms the pasted value stayed unchanged after insertion. Segmented address display: Industry standard shows only the first 4 and last 4 characters of an address. Zafu shows the full address in 4-character segments, making it actually readable and comparable. Install Zafu. Double-check every crypto address before you send.