Skip to content
ihategas.xyz

Signature Decoder

Runs offline

Paste any signature request and see in plain English what it actually authorises.

the JSON your wallet is asking you to sign

Token permit (EIP-2612)

This authorises 0x0000…8BA3 to spend the token at 0xA0b8…eB48 from your wallet — without a separate approval transaction.

The amount is unlimited. Whoever holds this signature can move every token you own now or acquire later, until you revoke it.
The deadline is the maximum value — this permission never expires.
A permit is a signature, not a transaction — it costs no gas and will not appear in your transaction history. It is the most common drainer payload.

Domain

Contract
0xA0b86991c6218b36c1d19D4a2e9Eb0cE3606eB48
Name
USD Coin
Version
2
Chain ID
1

Message

owner
0xd8dA6BF26964aF9D7eEd9e03E53415D37aA96045
spender
0x000000000022D473030F116dDEE9F6B43aC78BA3
value
115792089237316195423570985008687907853269984665640564039457584007913129639935
nonce
0
deadline
115792089237316195423570985008687907853269984665640564039457584007913129639935

About signature decoder

Signing is not the same as sending. A signature costs no gas, never appears in your transaction history, and can still hand someone permission to empty your wallet — which is why over $800 million has been drained through signature requests since 2023. This decoder takes the JSON your wallet is asking you to approve and says plainly what it authorises: which contract, which spender, how much, and for how long. Unlimited amounts and never-expiring deadlines are called out, because those two together are what a drainer needs. Nothing you paste here leaves your browser.

More wallet safety tools