SolDecode - Solana Transaction Preview

Tracking since Apr 11, 2026.

Changelog

• Apr 21, 2026
  description

  Every time you sign a Solana transaction, you're trusting a hash you can't read. Phantom shows you raw data, and you click "Confirm" hoping nothing drains your wallet. 98% of Pump.fun tokens are scams. Address poisoning attacks hit millions of wallets. Unlimited token approvals silently grant programs access to your funds.
  
  SolDecode fixes this. When any dApp asks you to sign a transaction, SolDecode intercepts the request and simulates it on-chain BEFORE it reaches your wallet. You see a clear preview of exactly what will happen:
  
  WHAT YOU GET:
  - Plain-English summary of the transaction (e.g., "Swap 2.5 SOL for 142 USDC on Jupiter")
  - Exact balance changes: what leaves your wallet and what comes in
  - Step-by-step breakdown of which programs execute
  - Risk warnings for dangerous patterns like unlimited token approvals
  - Failed transaction detection: know it will fail before you waste fees on it
  
  HOW IT WORKS:
  1. You click "Swap" (or any action) on a Solana dApp
  2. SolDecode intercepts the unsigned transaction
  3. Simulates it against current on-chain state via Solana RPC
  4. Shows a slide-in preview panel alongside your Phantom popup
  5. You click "Proceed" to continue to Phantom, or "Reject" to cancel
  
  RISK DETECTION:
  - Token approvals: flags when a program requests permission to spend your tokens
  - High-value alerts: warns when large amounts of SOL are leaving your wallet
  - Simulation failures: tells you WHY a transaction would fail and how to fix it (slippage, insufficient funds, expired blockhash)
  
  PRIVACY FIRST:
  - Your transactions are simulated via YOUR own RPC endpoint, nothing is sent to our servers
  - No analytics, no tracking, no telemetry
  - Fully open source (GPL-3.0): verify the code yourself at github.com/jvr0x/soldecode-extension
  - Your API key stays in local browser storage
  
  SETUP:
  1. Install the extension
  2. Get a free Helius RPC API key at dashboard.helius.dev
  3. Click the SolDecode icon, paste your endpoint, enable, save
  4. That's it, every transaction now gets previewed automatically
  
  SUPPORTED:
  - Phantom wallet (legacy and Wallet Standard)
  - Works on any Solana dApp: Jupiter, Raydium, Kamino, Meteora, Pump.fun, and more
  - Decodes swaps, transfers, token approvals, and any transaction with balance changes
  
  Built by developers who got tired of signing transactions they couldn't read.

  SolDecode shows you what a Solana transaction will actually do before you sign it.
  
  Every wallet prompt becomes a preview drawer that explains, in plain English:
  • Which tokens leave and enter your wallet, and exactly how much of each
  • Which programs the transaction will execute, in order
  • The estimated network fee and compute units
  • The calling site's URL, so you can confirm it matches the dApp you think you're on
  
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  WHAT IT CATCHES
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  
  Impersonator tokens - detects fake USDC, USDT, SOL, JUP, BONK, WIF, JTO, RAY, PYTH, and W tokens at mint addresses that don't match the real ones. Hardened against Unicode homoglyph bypasses including Cyrillic lookalikes (USDС), Greek lookalikes (PΥTΗ), fullwidth forms, and zero-width joiner insertion.
  
  Drainer heuristic - flags transactions that move most of your balance out in one shot.
  
  Multi-asset outflows - catches coordinated drains where SOL leaves alongside one or more SPL tokens.
  
  Unlimited approvals - warns when a transaction grants an open-ended delegate on one of your token accounts.
  
  Account ownership hijacks - detects AssignWithSeed and similar System Program tricks that silently reassign account ownership.
  
  Mint, freeze, and stake authority changes - flags authority transfers and captures that can brick your tokens or reroute your stake.
  
  Sub-dust SOL receipts - detects incoming transfers below 0.001 SOL, a common address-poisoning setup pattern.
  
  Lookalike destinations - catches poisoned copy-paste addresses that share first and last 4 characters with an address you've already sent to.
  
  Surprise mints and surprise SOL - after you sign, SolDecode polls the signature and compares the finalized transaction against the simulation at a 5% threshold. If the actual result contains tokens that weren't in the preview, or unexpected SOL movement, you get a non-blocking toast alert.
  
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  TRUSTED RECIPIENTS
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  
  Every address you've successfully sent to is added to a local contacts list so the lookalike-destination detector knows which addresses are really yours. Inspect the list or clear it at any time from the popup. The list never leaves your device.
  
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  CONFIGURABLE SAFETY
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  
  Simulation timeout - set between 10 and 120 seconds to match your RPC provider. If simulation hasn't finished by the deadline, SolDecode fail-closes and rejects the transaction rather than letting it through silently. Crashed or stalled service workers cannot become a silent bypass.
  
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  SUPPORTED WALLETS
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  
  Phantom, Jupiter, Solflare, Backpack - all verified working through the Wallet Standard sign request interception path.
  
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  PRIVACY
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  
  Fully local. No analytics, no telemetry, no tracking. The only outbound network traffic is the Solana RPC simulation request to the endpoint you configure yourself (Helius by default). Your keys, wallet state, and browsing history never leave your machine. We do not operate any servers.
  
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  OPEN SOURCE
  ━━━━━━━━━━━━━━━━━━━━━━━━━━━━
  
  GPL-3.0. Every line of code is auditable:
  https://github.com/jvr0x/soldecode-extension
  
  Landing page: https://jvr0x.github.io/soldecode-extension/

• Apr 21, 2026
  name

  SolDecode — Solana Transaction Preview

  SolDecode - Solana Transaction Preview

Permissions & access

Permissions

storage

Host access

https://*.helius-rpc.com/*

Screenshots