A New Way to Visualize Crypto Transactions
DeFi Security Summit at Devconnect Argentina 2025 · November 2025 · 5:05
Opaque DeFi transactions can leave signers decoding raw four-byte values, and the speaker argues that static API or JSON descriptions may miss programmer intent expressed in code. The proposed visual signing protocol is an early, open-source, chain-agnostic framework for mapping transactions into human-readable structures, demonstrated with a Uniswap v3 swap and a Solana transaction. Its trust model uses reproducibly built Rust code in Turnkey’s enclave, while retail and institutional wallets may apply different policies afterward.
Speakers
Topics
From DeFi Security Summit at Devconnect Argentina 2025, hosted by DeFi Security Summit.
Transcript
Hi, I'm Prasana. Um, I lead uh uh protocols research at uh Anchorage and I'm going to be talking about how we are how we have built a system for visualizing uh raw transactions into human readable uh format um at at Anchorage and we are we are open sourcing it. Uh but I want to step back a little bit and we'll actually present uh this talk was actually stated to be presented by my c-orker who is a founding engineer uh Victor. Um and I ended up uh we've been working together to uh to come up with this mechanism. Uh we we built this as an internal tool
inside Anchorage to support um support many multiple chains uh that that Anchorage um builds on as a institutional custodian. But what we found was because these uh DeFi transactions were so opaque um retail uh was getting attacked a lot more while we were building all these things for for uh institutions. >> Um >> quick quick show of hands. Would you would you sign this transaction?
>> Um uh do you know what what these uh four bytes means? Any anyone does that does that look familiar? >> Yeah, that's that's transfer. But why do we even have to like >> translate that memorize these like four byte characters, right? Why why couldn't we express like we have these programming languages and these and these systems. And by the way, this is exactly the snippet uh that got uh by bit hacked for $1.9 million um a billion.
Um and there's also another problem if you have been following the the standards processes. Uh there's a AI and uh standards trap. um if you might have access to the API but you may actually not know what the intent of the programmer is because that intent is expressed in code. It's actually you can write uh so this is a snippet for the same contract um not exactly the same location but um uh permit 2 contract in uh ERC 7730 which is a static JSON whereas uh when you when you look at code you have these like assembler blocks and you know uh bite bite munching you know all of those sorts of
things. So what we realized is we need a real programming language to to be able to map these transactions into something human readable and we've built it in a way that actually supports way beyond Ethereum. Um and that's visual signing protocol. So here here are two um this is this is a little bit early um screenshot of of our app but um expresses the same. So this is this is something from u unis swap u you know standard v3 swap transaction um and we're building this as a open source framework that is chain agnostic that translates rot uh transactions into these data structures and on the right
you have solana transaction and we built this for sooie we built this for a few few other chains already as a way to validate that this this uh structure works. So why why do you trust this right? Most of most of the folks use some kind of hardware wallet. We we sign everything with HSM. What to do this we partnered with uh turnkey. What happens is turnkey has this amazing stack with uh stage that is able to reproducibly build um Rust code um and uh we're we're able to run it on on turnkeys enclave and we verify it uh and and your wallet might have different
policies. If you're a retail wallet, you might you might just sign it directly. If you're uh institutional wallet like us, you might have other uh other policies, but you're able to um make that decision afterwards. Um and additionally, since I mentioned about programming languages, we want to meet where the developers are. No more JSONs, no more translations. We want to give you solidity interfaces, solidity types that you can translate and you immediately get a type system so that if your code compiles, you save that shot physics hash. You can you can check against it. We have already um >> we've already opened our opened up our wallet integration app. Uh I'm doing a um ETH global uh we're doing a ETH
global bug bug bounty. Um, if you want to try to use our framework, try to add add a couple of DAPs and provide feedback, would love to um, have you hack on this framework. Thank you. Yeah.