Skip to content

Add TxScope — Solana multisig pre-signing threat scanner#444

Open
txscope-sol wants to merge 1 commit intosecurity-alliance:developfrom
txscope-hq:add-txscope
Open

Add TxScope — Solana multisig pre-signing threat scanner#444
txscope-sol wants to merge 1 commit intosecurity-alliance:developfrom
txscope-hq:add-txscope

Conversation

@txscope-sol
Copy link
Copy Markdown

Summary

Adds TxScope to the monitoring tools and wallet security tools pages as a Solana-native
pre-signing transaction threat scanner for Squads Protocol multisigs.

This addresses the non-EVM tooling gap noted in the current tools page — TxScope is
purpose-built for Solana and serves the "external transaction monitor" role described
in the multisig operations framework (SFC-MS-6.1.3, SFC-TRO-6.1.1).

What TxScope does

  • Monitors Squads Protocol vaults for pending proposals
  • Simulates transactions against Solana mainnet via Helius RPC
  • Generates plain-language threat reports before signers approve
  • Detects: durable nonces, authority transfers, withdrawal guard manipulation, known attack patterns, proposer anomalies
  • Instruction-level trace and decode with CPI depth
  • Risk scoring (0–100) for automated alerting thresholds
  • Free on-demand scans; paid tiers for continuous monitoring with Telegram/Slack alerts

Relevance

  • Solana-native tooling addressing the EVM gap in the current tools page
  • Aligns with SFC-MS-6.1.3 (Multisig Monitoring and Alerts) and SFC-TRO-6.1.1 (Monitoring and Threat Awareness)
  • Demonstrated against the Drift Protocol $285M exploit — public case study reports available at txscope.com

Changes

  • docs/pages/monitoring/tools.mdx — added TxScope under Commercial / Hosted section
  • docs/pages/wallet-security/tools-and-resources.mdx — added TxScope under Monitoring & Alerting > Solana Multisig Monitoring

Website: https://txscope.com

Adds TxScope to monitoring tools and wallet security tools pages.
TxScope is a Solana-native pre-signing transaction threat scanner
for Squads Protocol multisigs, filling the non-EVM tooling gap
noted in the current tools page.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
@scode2277 scode2277 requested a review from pinalikefruit April 7, 2026 11:38
@scode2277
Copy link
Copy Markdown
Collaborator

This PR needs approval of @JosepBove and @pinalikefruit as stewards of the two frameworks touched.

Also, to be merged, we need all the commits to be signed. We made a small guide to fix this here -> https://frameworks.securityalliance.dev/contribute/contributing#fixing-unsigned-commits. Keep in mind that this guide assumes you already have a signing key set up

Copy link
Copy Markdown
Collaborator

@pinalikefruit pinalikefruit left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks for the support @txscope-sol , everything's fine on my side @scode2277

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants