Our work

We made Safe transactions verifiable offline.

SafeLens lets signers of a Gnosis Safe multisig check a transaction offline before approving it, instead of trusting what a web page shows them. LFG Labs built it for the Ethereum Foundation.

Client
Ethereum Foundation
Built by
LFG Labs
Product
SafeLens

Overview

What is SafeLens?

A multisig wallet needs several people to approve a transaction before it runs. Those people usually see the transaction in a web interface, and the raw calldata behind it means little to most of them. So they end up approving what the page tells them, with no separate way to check it.

SafeLens gives them that check. It packs a Safe transaction into one evidence file that can be verified on a computer with no network access.

How it works

How SafeLens works

You paste a Safe transaction URL into the web generator, or use the command line tool, and get an evidence file. You then open it in the desktop app or the command line tool. The desktop app's security policy blocks outside network requests, so it cannot reach the internet during verification.

SafeLens recomputes the transaction hash itself and checks the signatures against it. It also translates the calldata into readable details, using built-in interpreters and the ERC-7730 clear signing standard.

Why SafeLens

Why it is useful

Signers can read and check a transaction away from the interface that showed it to them. The file is self-contained, so each signer can verify it on their own machine.

SafeLens does not claim to be the only check. The file starts from data fetched from the Safe API, and the report labels how far each part can be trusted. For high-value transactions, the project recommends comparing at least two independent tools.

Contact our team

We take 4 protocols per quarter. Formal verification demands deep focus. We'd rather verify fewer contracts well than many poorly.

Continue reading

Learn more

Try the generator or read the source on GitHub.

Trust assumptions, which list what SafeLens verifies and what it takes on trust.

Bug bounty, which covers SafeLens.