Skip to content

Add TxScope — Solana multisig pre-signing threat scanner#444

Open
txscope-sol wants to merge 1 commit intosecurity-alliance:developfrom
txscope-hq:add-txscope
Open

Add TxScope — Solana multisig pre-signing threat scanner#444
txscope-sol wants to merge 1 commit intosecurity-alliance:developfrom
txscope-hq:add-txscope

Conversation

@txscope-sol
Copy link
Copy Markdown

Summary

Adds TxScope to the monitoring tools and wallet security tools pages as a Solana-native
pre-signing transaction threat scanner for Squads Protocol multisigs.

This addresses the non-EVM tooling gap noted in the current tools page — TxScope is
purpose-built for Solana and serves the "external transaction monitor" role described
in the multisig operations framework (SFC-MS-6.1.3, SFC-TRO-6.1.1).

What TxScope does

  • Monitors Squads Protocol vaults for pending proposals
  • Simulates transactions against Solana mainnet via Helius RPC
  • Generates plain-language threat reports before signers approve
  • Detects: durable nonces, authority transfers, withdrawal guard manipulation, known attack patterns, proposer anomalies
  • Instruction-level trace and decode with CPI depth
  • Risk scoring (0–100) for automated alerting thresholds
  • Free on-demand scans; paid tiers for continuous monitoring with Telegram/Slack alerts

Relevance

  • Solana-native tooling addressing the EVM gap in the current tools page
  • Aligns with SFC-MS-6.1.3 (Multisig Monitoring and Alerts) and SFC-TRO-6.1.1 (Monitoring and Threat Awareness)
  • Demonstrated against the Drift Protocol $285M exploit — public case study reports available at txscope.com

Changes

  • docs/pages/monitoring/tools.mdx — added TxScope under Commercial / Hosted section
  • docs/pages/wallet-security/tools-and-resources.mdx — added TxScope under Monitoring & Alerting > Solana Multisig Monitoring

Website: https://txscope.com

@scode2277 scode2277 requested a review from pinalikefruit April 7, 2026 11:38
@scode2277
Copy link
Copy Markdown
Collaborator

This PR needs approval of @JosepBove and @pinalikefruit as stewards of the two frameworks touched.

Also, to be merged, we need all the commits to be signed. We made a small guide to fix this here -> https://frameworks.securityalliance.dev/contribute/contributing#fixing-unsigned-commits. Keep in mind that this guide assumes you already have a signing key set up

Copy link
Copy Markdown
Collaborator

@pinalikefruit pinalikefruit left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the support @txscope-sol , everything's fine on my side @scode2277

Adds TxScope to monitoring tools and wallet security tools pages.
TxScope is a Solana-native pre-signing transaction threat scanner
for Squads Protocol multisigs, filling the non-EVM tooling gap
noted in the current tools page.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@txscope-sol
Copy link
Copy Markdown
Author

Apologies for the delay on the signing. The commit is now signed and should show as verified.

On a related note, we're currently looking for protocol teams to trial TxScope on their Squads multisigs. If you know any teams that might benefit from pre-signing transaction analysis, we'd appreciate an introduction. Happy to set up a free trial for any SEAL-affiliated protocol.

Copy link
Copy Markdown
Contributor

@JosepBove JosepBove left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It looks good to me. I agree with the changes on the monitoring section, thanks for helping us expanding the section on Solana specific tools.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants