shieldforge.xyz · Tools
2 items
Audit token approvals on 88 chains. Decode EIP-712 permits before signing. Spot phishing on dApps. Self-custodial wallet. ShieldForge brings the Web3 approval scanner and EIP-712 permit decoder into your browser toolbar. **Self-custodial** — no keys held, no custody, no relayer. Wallet signing always happens in your wallet's own UI. ### What it does - 🔍 **Scan token approvals across +95 chains** — Ethereum, Base, Arbitrum, Polygon, BNB Smart Chain and more.. - ✍️ **Decode EIP-712 typed-data signatures** before you sign — Permit2, EIP-2612, OpenSea listings, Permit. Plain-text breakdown of domain, message, primary type. Warnings when value = 2^256-1 (unlimited allowance). - 🛡️ **Phishing watch on dApps** — when a dApp asks for a typed-data signature with a permit-shaped payload, a non-blocking floating banner offers a one-click decode. Excludes banking domains, Google login, ShieldForge web app. - 📊 **Local scan history** — past scans stored in `chrome.storage.local`, never uploaded. - 🔔 **Weekly hygiene reminder** (opt-in) — browser notification if your last scan showed unrevoked CRITICAL approvals more than a week ago. - 🌍 **5 languages** — English, Español, 日本語, Русский, 中文 — auto-detected from browser locale. ### Privacy We never read wallet keys or send PII. The scanner API receives the wallet address you scan (a public on-chain identifier) along with standard HTTP request metadata. Full policy at https://shieldforge.xyz/privacy. ### Why we built this Most token-approval drains in 2026 happen via blind EIP-712 signatures. Standard wallet UIs show "Sign typed data?" without explaining what it means. ShieldForge fills that gap — decode before you sign, audit before you forget, revoke before it costs you. Backed by the same scanner running at https://shieldforge.xyz across +95 chains. A longer explanation of features, functionality, and other relevant information. This field is only displayed on the add-on's product page.
May 14, 2026
rating_count is the Chrome Web Store ratings count, not a written-review count.
Media assets
Screenshots and videos on the listing.
Has promo video
Whether the listing includes at least one video.
Languages
Declared language locales.
Developer website
Listing exposes a developer website URL.
Contact email
Listing exposes a contact email.
Keyword in name
Case-insensitive substring match in the name.
Keyword in description
Case-insensitive substring match in the description.
Keyword occurrences in description
Count of case-insensitive occurrences in the description.
Category user-count percentile
Share of same-category extensions with fewer users (null if unknown).
These are transparent listing completeness / keyword signals, not a prediction of Chrome Web Store search ranking.