# Approval Scanner PermitDecoder

> Audit token approvals across 88 chains (EVM + Tron). Decode EIP-712 permit signatures before you sign. Spot phishing approval prompts. Revoke unsafe spenders directly from your wallet — no custody, no keys held.

Canonical page: [https://chrome-stats.com/d/approval-scanner-permitdecoder](https://chrome-stats.com/d/approval-scanner-permitdecoder)

## Overview

- **ID:** `approval-scanner-permitdecoder`
- **Platform:** Firefox
- **Type:** Firefox add-on
- **Status:** Available
- **Publisher:** R228
- **Category:** web-development,privacy-security
- **Daily users:** 1
- **Version:** 1.0.2
- **Last updated:** 2026-05-10
- **First published:** 2026-05-07
- **Size:** 38 KB
- **Data as of:** 2026-09-06
- **Store listing:** [Firefox Add-ons Store](https://addons.mozilla.org/firefox/addon/approval-scanner-permitdecoder/)
- **Website:** [https://shieldforge.xyz/extension](https://shieldforge.xyz/extension)
- **Privacy policy:** [https://addons.mozilla.org/firefox/addon/approval-scanner-permitdecoder/privacy/](https://addons.mozilla.org/firefox/addon/approval-scanner-permitdecoder/privacy/)

## Description

ShieldForge brings the Web3 approval scanner and EIP-712 permit decoder into your browser toolbar. <strong>Self-custodial</strong> — no keys held, no custody, no relayer. Wallet signing always  happens in your wallet's own UI.

What it does
<ul><li>🔍 <strong>Scan token approvals across 88 chains</strong> — Ethereum, Base, Arbitrum, Polygon, BNB Smart Chain, Optimism, Linea, Scroll, zkSync, Mantle, Sonic, Blast, Berachain, Cronos, Avalanche, Tron, Ronin, Etherlink, Hemi, BOB, ApeChain, Immutable zkEVM, Story, ZetaChain, Worldchain, Unichain, opBNB, Ink, and 60+ more. Risk-classified results sorted CRITICAL → LOW.</li><li>✍️ <strong>Decode EIP-712 typed-data signatures</strong> before you sign — Permit2, EIP-2612, OpenSea listings, Permit. Plain-text breakdown of domain, message, primary type. Warnings when value = 2^256-1 (unlimited allowance).</li><li>🛡️ <strong>Phishing watch on dApps</strong> — when a dApp asks for a typed-data signature with a permit-shaped payload, a non-blocking floating banner offers a one-click decode. Excludes banking domains, Google login, ShieldForge web app.</li><li>📊 <strong>Local scan history</strong> — past scans stored in <code>chrome.storage.local</code>, never uploaded.</li><li>🔔 <strong>Weekly hygiene reminder</strong> (opt-in) — browser notification if your last scan showed unrevoked CRITICAL approvals more than a week ago.</li><li>🌍 <strong>5 languages</strong> — English, Español, 日本語, Русский, 中文 — auto-detected from browser locale.</li></ul>
Privacy

We never read wallet keys or send PII. The scanner API receives the wallet address you scan (a public on-chain identifier) along with standard HTTP request metadata. Full policy at https://shieldforge.xyz/privacy.

Why we built this

Most token-approval drains in 2026 happen via blind EIP-712 signatures. Standard wallet UIs show "Sign typed data?" without explaining what it means. ShieldForge fills that gap — decode before you sign, audit before you forget, revoke before it costs you.

Backed by the same scanner running at https://shieldforge.xyz across +100 chains.

## Rankings

- #113,859 — Overall
- #39 — non-custodial
- #96 — promo code
- #159 — ethereum

## Permissions and access

### Permissions

- `activeTab`
- `storage`
- `alarms`
- `notifications`

### Host permissions

- `https://shieldforge.xyz/*`
- `https://*.shieldforge.xyz/*`

### Content script matches

- `*`

## Safety

- **Risk impact:** Moderate risk impact
- **Risk likelihood:** High risk likelihood

### Analysis details

- Allows access to all websites, posing a significant security risk as it can monitor and modify data from any visited site.
- This extension has low user count. Unpopular extensions may not be stable or safe.

> Some risk analysis details are omitted from this free response. [Upgrade to view the full analysis](https://chrome-stats.com/pricing).

## Similar extensions and apps

- [AllowanceGuard](https://chrome-stats.com/d/allowanceguard)
- [Revoke.cash - web3 scam protection](https://chrome-stats.com/d/revoke-cash) — 392 users, 4.86 / 5
- [Init Revoke Extension](https://chrome-stats.com/d/init-revoke-extension) — 1 users, 5.00 / 5
- [Init Revoke Shield](https://chrome-stats.com/d/init-revoke-shield) — 1 users, 4.83 / 5
- [Kerberus Sentinel3](https://chrome-stats.com/d/kerberus-sentinel3) — 5.00 / 5
- [Core Protect](https://chrome-stats.com/d/core-protect) — 1 users, 5.00 / 5
- [Web3 Antivirus](https://chrome-stats.com/d/web3-antivirus) — 754 users, 4.83 / 5
- [Cryptolphin](https://chrome-stats.com/d/cryptolphin) — 1 users, 5.00 / 5
- [CryptoShield](https://chrome-stats.com/d/cryptoshield) — 1 users
- [Phantom](https://chrome-stats.com/d/phantom-sol) — 5.00 / 5
- [CryptoShield Guard](https://chrome-stats.com/d/cryptoshield-guard) — 2 users, 1.00 / 5
- [Solana Social Credit & PumpTrust](https://chrome-stats.com/d/solana-social-credit-pumptrust) — 2 users

---

Source: [Chrome-Stats](https://chrome-stats.com/d/approval-scanner-permitdecoder)