Pre-sign verification for Solana multisigs: Squads v4 proposals decoded, simulated and checked for who controls what after. Evidence before you approve.
April 1, 2026: two pre-signed approvals handed Drift's admin to an outside address. Drift says users lost $295M. We replayed the exact bytes those signers signed through Presign → CRITICAL: "Admin moves outside the multisig." No wallet needed: https://t.co/MqBqzCAneE
@SolPlay_jonas As promised: we cast Squads v4 votes on devnet through Anza's programmatic signer, signed offline and relayed later (up to 92s, past blockhash expiry). Presign rated the envelope LOW and missed the vote. Fixed: it now decodes it and flags the vote CRITICAL before signing.
Shipped: Presign recognizes the programs replacing durable nonces.
A Squads vote signed offline through Anza's programmatic signer is flagged CRITICAL before signing and HIGH once landed. Blueshift Vector envelopes are recognized too.
Tested on devnet: https://t.co/3VhmcJPien
@SolPlay_jonas Notes from testing:
1. Building the v1 messages with Kit 8.5 worked well; the JS client (ed25519-programmatic-signer) isn't on npm yet.
2. Vector's program IDs aren't deployed on devnet yet.
3. The Squads member is the PDA, not the cold key. Member lists should show both.
@SolPlay_jonas As promised: we cast Squads v4 votes on devnet through Anza's programmatic signer, signed offline and relayed later (up to 92s, past blockhash expiry). Presign rated the envelope LOW and missed the vote. Fixed: it now decodes it and flags the vote CRITICAL before signing.
Two Drift council members approved transactions they didn't fully understand. We built Presign so the next signer can: paste a Squads proposal, see who controls what after it executes, with evidence.
@srhhadron@jacobdotsol Squads is close to that middle ground: the proposal waits on chain and each member signs only their own vote, when ready.
What needs a loud warning is a vote pre-signed with a durable nonce: it stays valid until used or cancelled. That's how Drift's admin was taken.
Why Solana signatures expire in ~30s: blockhash validity is counted in slots, and slots got faster.
In Squads the proposal waits on chain; members land only their own votes.
A vote pre-signed with a durable nonce stays valid until used or cancelled. Drift's attackers had two.
Submitted. Presign: before you approve a Squads multisig proposal, see who controls what afterwards, with on-chain evidence. Replay the Drift approvals, no wallet needed: https://t.co/MqBqzCAV4c
April 1, 2026: two pre-signed approvals handed Drift's admin to an outside address. Drift says users lost $295M. We replayed the exact bytes those signers signed through Presign → CRITICAL: "Admin moves outside the multisig." No wallet needed: https://t.co/MqBqzCAneE
Submitted. Presign: before you approve a Squads multisig proposal, see who controls what afterwards, with on-chain evidence. Replay the Drift approvals, no wallet needed: https://t.co/MqBqzCAV4c
It's the final day of Crypto World's Fair.
Thousands of developers and founders from across the blockchain ecosystem are now submitting the products they have been building over the past month.
For many of you, today is not the end of your journey. It's just the beginning.
Your wallet asks: "Approve?"
But do you know what you're actually approving?
Presign checks a crypto transaction before you sign it, and tells you in plain words what it will do.
Know exactly what you sign. 👁
https://t.co/Jmuc26e6GV
Your wallet asks: "Approve?"
But do you know what you're actually approving?
Presign checks a crypto transaction before you sign it, and tells you in plain words what it will do.
Know exactly what you sign. 👁
https://t.co/Jmuc26e6GV
today we wrapped up our Submission Night with 8 teams 🚢
we got our projects ready for the @colosseum
huge thanks to everyone who joined
and much love to @SuperteamTR for making this possible ❤️
HIGHER MALATYA🚀🫶