Know exactly what you sign.
On April 1, 2026, about $285M was drained from Drift's users. No contract bug, no stolen private key: after months of social engineering, two Security Council members had pre-signed approvals they did not fully understand. Presign decodes every multisig proposal, simulates it, and tells signers — in one sentence, with evidence — who controls what afterwards.
or analyze any transaction before you sign itSolana multisigs today
- Squads v4 multisigs on mainnet
- 157,117
- of them with no time lock
- 98.2%
- major programs upgradeable through a Squads multisig without a time lock
- 8 of 13
Read-only mainnet census, 2026-09-27: every Squads v4 multisig account, and the upgrade authority of 36 widely used programs. Aggregates only. No time lock means an approved proposal executes the moment its threshold is reached — as Drift's did.
What Presign catches
All 111 rules →Control leaving the multisig
Admin, upgrade and token authorities handed to an address the multisig does not control — decoded from the program's own IDL.
Approvals that never expire
Durable-nonce signatures that can be held for weeks and replayed at the attacker's chosen moment.
Treasury drains
Every proposal simulated as the vault executing it now: exactly which assets leave, and to whom.
Weakened governance
Lower thresholds, removed time locks, new members, single-key config authorities.
How it works
1
Load
Proposal, vault transaction and multisig config, straight from chain.
2
Decode
Squads, SPL, Token-2022, BPF loader — and any Anchor program via its on-chain IDL.
3
Simulate
As the vault, with the executing member paying the fee.
4
Rule
Deterministic rules. Every signal cites the byte, account or IDL field behind it.
5
Brief
One screen: what you authorize, who controls what afterwards, what could not be verified.
Presign Guard on devnet
A warning helps only if someone can act on it. Presign Guard is an on-chain program that holds a protocol's critical authorities: anything done with them is scheduled, waits a fixed delay, and any single guardian can veto it — even a compromised multisig cannot remove the guardians. Routine operations stay fast.
Live on devnet with a real Squads multisig: a Drift-style takeover was scheduled, flagged CRITICAL, and vetoed by one guardian. Unaudited — devnet only. How it works
Built for
Multisig signers & security councils
Verify a proposal from a second, independent screen before approving it.
Verify a proposal
Protocol & treasury teams
Watchtower sends every new proposal's brief to all signers the moment it is created, checked against your own team policy.
Set up alerts & policy
Wallets, custodians & AI agents
The same engine over HTTP and MCP: a pre-sign check an LLM cannot talk its way past.
Use the API
Principles
Never "safe" by default
Missing data is never read as safety. Incomplete checks say so, and the verdict stays unrated.
Evidence, not scores
Each finding links to the exact on-chain fact it comes from, so a co-signer can check it independently.
AI explains, never decides
The risk verdict comes from deterministic rules. An AI layer may explain it; it cannot change it.
Read-only
No keys, no seed phrases, no signing. Presign reads the chain and your pasted input — nothing else.
Also included: wallet & token risk scanner · guided demo (no wallet)