coinbase / coinbase/onchainkit

feat: Add contract security verification before transaction signing

Open
#2,637 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
1k
Forks
520
Avg merge
32m
Merged PRs (30d)
2

Description

### Describe the solution you'd like

## Problem

Users interacting with dApps built on OnchainKit have zero visibility
into contract safety before signing a transaction. There is currently
no way to know if a contract is verified, is a proxy, or presents
any risk signals.

## Proposed Solution

Add a `` component that automatically analyzes
contract addresses from `TransactionContext` and displays risk
indicators before the user signs.

```tsx


```

Shows:
- ✅ Contract verified
- ⚠️ Proxy contract (with implementation address)
- 🔴 Contract not verified

## Implementation

PR #2636 implements this feature as a standalone component
with no dependency on other open PRs.

## Describe alternatives you've considered

**Revoke.cash / existing allowance managers** — standalone tools
that users must visit separately. Not integrated into the transaction
flow where the risk actually occurs.

**Manual implementation per dApp** — each team builds their own
contract verification check. Inconsistent, unaudited, duplicated effort.

OnchainKit's SecurityCheck solves this at the framework level —
one implementation, consistent UX across all dApps built with OnchainKit.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.