Paste a Safe multisig transaction hash or a Safe{Wallet} link. txray fetches the raw data, decodes the calldata itself — including MultiSend batches — and flags the patterns behind the largest wallet drains: delegatecall, implementation upgrades, owner and module changes, unlimited approvals.
Try a real one:
Fetching from the Safe Transaction Service and decoding locally…
How it works
Your browser calls the public Safe Transaction Service for the transaction JSON, then this page decodes the calldata on your device with the local selector table in app.js. There is no backend to trust, no account, no cookie, no analytics. The source is public: app.js is a single readable file.
What this is and what it is not. txray is an independent reading aid: it recomputes the human-readable meaning and the EIP-712 hash from the raw fields and highlights known dangerous patterns. It cannot prove that a transaction is safe, that the source data is honest, or that a target contract behaves as its name suggests. It never signs, never connects a wallet and never asks for a key. For a high-value Safe, verify the same fields against a second independent source and the signers' own records.