Skip to content

Repository files navigation

Multisig Inspector

A local-first, read-only Gnosis Safe multisig auditor.

Transparent, client-side, and usable without trusting a hosted application backend. This app is not a wallet manager and does not create, sign, queue, or execute transactions.

Trust model

  • Direct RPC reads through viem
  • No wallet connection
  • No transaction creation, signing, or execution
  • Transaction Inspector can optionally send transaction fields to GoPlus for a current-state dry run; decoding and hash verification remain local
  • Safe Transaction Service is used only to list queued/history transactions when importing by Safe address or URL
  • No backend database
  • Scan snapshots are stored locally in IndexedDB
  • Reports export as Markdown and JSON

What it reads

  • Safe owners
  • Approval threshold
  • Nonce
  • Enabled modules
  • Guard storage slot
  • Fallback handler storage slot
  • Singleton/mastercopy storage slot
  • Safe version when available

Local development

Optional GoPlus simulation requires server-only credentials in .env.local:

GOPLUS_APP_KEY=your_app_key
GOPLUS_APP_SECRET=your_app_secret

These values must also be configured as Vercel environment variables in production. They are never sent to the browser.

npm install
npm run dev

Open http://localhost:3000.

Verification

npm run test
npm run type-check
npm run lint
npm run build

License

MIT

About

Read-only security scanner for Gnosis Safe multisig wallets. Analyzes on-chain owner structures, thresholds, and enabled modules to surface governance risks and config drift. Fully client-side, no wallet connection or backend.

Topics

Resources

Stars

10 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages