VIGIL
Install Buy
Nov 4, 2026 Reported: House Democrats are weighing a new crypto bill with more SEC power and a smaller CFTC. Washington is fighting over who polices crypto. source ↗

Wallet privacy firewall · v0.1 · 100% free + open source

Your wallet snitches.
VIGIL shuts it up.

Read guard on every site. Leak guard on every request. Sign guard on every signature.

Whoever wins in Washington, nothing in that fight protects you today. Any site you've ever connected can read your address the second it loads, no click, then ship it to analytics vendors. VIGIL blocks the silent read, kills known trackers and decodes every signature before you sign. Runs locally. Never touches your keys.

Launch in LIVE

6:00 PM CST your time: …

Install v0.1
$VIGIL launching 6:00 PM CST Buy

Fair launch on pump.fun · 1B supply · no presale · no VC

Chrome · Brave · Edge  /  Phantom · MetaMask · any Wallet Standard or EIP-1193 wallet

SILENT READ ✕ BLOCKEDYOU CLICKED CONNECT ✓TRACKER ✕ KILLED

NEW 01 · Link Guard · ships today in v0.1

Shielded pools hide the transfer. Your browser re-links you.

Most wallet privacy isn't lost to broken cryptography. It's lost to small mistakes: one transfer, one double connect, one matching amount. Link Guard catches them before you sign.

MAINBURNERLINK GUARD ✕ NOT LINKED
Link GuardSelf-link warning illustration

Main → Burner

Both wallets are yours. This transfer ties them together on-chain, forever.

CANCEL send anyway?
  1. 01

    Self-link warning

    About to send between two of your own wallets, like funding a fresh burner from your main? VIGIL warns you first: that transfer ties both wallets together on-chain, for good.

  2. 02

    Site cross-link alert

    Connected your main and your burner to the same site? VIGIL tells you that site has now seen both wallets and can link them.

  3. 03

    Amount match

    Sending the exact amount your other wallet sent recently? Matching amounts are one of the easiest ways deposits and withdrawals get linked. VIGIL tells you to change it.

Different layers

On-chain privacy hides the money. VIGIL guards the browser. Use both.

On-chain privacy tools work on the chain. VIGIL works where your address actually leaks and where the mistakes happen: in the browser, before you sign.

Capability On-chain privacy tools VIGIL
Hides transfers on-chain ✓ use them together
Stops sites silently reading your address — ✓
Shows who received your address — ✓
Decodes and blocks drainer-style signatures — ✓
Warns before you link your own wallets NEW — ✓
Blurs addresses on stream — ✓

Compared by category, not any specific product. Some tools cover part of this; check yours.

02 · The leak

What your wallet leaks.

Open a dApp you've used before. Before you click anything, the page can ask your wallet who you are and forward the answer to whoever it likes. VIGIL sits in that gap and logs every move.

vigil://feed DEMO · example events
1,325 of the top 100K sites probed for wallets in one academic crawl.arXiv 2306.08170
0 clicks a site you've connected before needs to read your address again.
∞ how long a signed durable-nonce transaction can sit before someone sends it.

03 · The guards

Every guard. One extension.

Read guard on every site. Leak guard on every request. Sign guard on every signature.

NEW

Link Guard

Warns before you tie your own wallets together: self-transfers, one site seeing two of your wallets, and amounts that match your other wallet's.

READ

Ghost Mode

Sites can't read your address until you click Connect. Silent reads, eager connects, auto-connect: blocked. Trusted sites skip it.

LEAK

Leak Radar

Every third-party server your address was sent to, grouped site → receiver, tagged tracker / RPC / third-party. Leak Block cuts requests carrying it in the URL.

LEAK

Tracker Kill

Blocks known wallet-analytics SDK hosts at the network layer. Add your own domains.

SIGN

Sign Guard

Decodes permits, Permit2, Seaport, approvals, 7702 auths, blind eth_sign, durable-nonce and SPL authority changes before you sign. Critical = blocked by default.

SIGN

Sleeping Signature Ledger

Every off-chain signature you've handed out, with spender, amount and deadline. Kill switch burns the nonce or revokes in one click.

SIGN

Delegation Scan

On connect, checks your EVM account for an EIP-7702 delegation and names the delegate.

READ

Link Shield

Clicked in from X, Telegram or Discord? Signing warnings escalate. Lookalike and punycode domains get flagged.

SIGN

Payee Vault

Save who you pay. Lookalike recipients (address poisoning) get flagged on paste and in transfers.

PRIVACY

Screen Shield

One toggle blurs every wallet address on screen, full or shortened. Stream, screenshot and post PnL without doxxing your wallet.

$VIGIL

Holder Check

Paste a Solana address. VIGIL reads your $VIGIL balance over public RPC and shows your tier.

NEW · free for everyone

Wallet Watch. 24/7, for free.

Signed something on your phone last month? VIGIL re-checks every wallet you use, every 15 minutes, for live token delegates, close authorities, wallet takeovers and EIP-7702 delegations, and pings you the moment a new one appears. No subscription. No account. Turn on Auto in the Holder tab.

04 · The attacks

Two signatures your revoke tool can't see.

Revokers scan the chain. These live off it until the moment they drain you.

Attack 01 · Solana

The transaction that never expires.

A normal Solana transaction dies in about a minute: its blockhash goes stale. A durable-nonce transaction doesn't. It stays valid until the nonce moves, so a signature you give today can be sent next month.

REPORTED

Drift, 1 Apr 2026. Losses reported at $270M+, tied to pre-signed durable-nonce transactions that sat waiting.

VIGIL: tags every durable-nonce tx "never expires", blocks it by default and logs it in the Ledger. Nonce-authority and SPL owner changes get the same treatment.

CRITICALSign Guardillustration

Durable-nonce transaction

This transaction never expires. Whoever holds it can submit it at any time.

  • nonce account9pQx…Lm2a
  • also insideSPL SetAuthority → owner change
  • arrived fromt.co (outside link)
BLOCKED

Attack 02 · EVM

The permit that hides off-chain.

Permit, Permit2 and Seaport orders are signatures, not transactions. Nothing touches the chain until the attacker spends it, so on-chain approval checkers show you clean while a live permit sits in someone's database.

PATTERN

Sign a "gasless listing" or "claim" message, look at your approvals, see nothing. That's the trap.

VIGIL: decodes the permit before you sign, logs every one you do sign in the Sleeping Signature Ledger, and the kill switch invalidates Permit2 nonces or burns an EIP-2612 nonce before it gets used.

LIVESleeping Signature Ledgerillustration

Permit2 allowance · USDC

  • amountunlimited
  • spender0x7a3f…c91e plain wallet
  • deadline2027-05-01
KILL SWITCH invalidate nonce → 1 tx

05 · $VIGIL

The tool is free. Holders get the fees.

Every guard, Wallet Watch and the Evidence Pack are free for everyone, forever. Creator fees go back to the people holding $VIGIL and into the infrastructure that keeps VIGIL running.

≥ 100,000 $VIGIL

Holder

  • Weekly SOL rewards, pro-rata to your balance
  • Vote on what VIGIL builds next
  • Vigil Watch bounties at 1×

≥ 250,000 $VIGIL

Sentinel

  • Everything in Holder
  • Early access to new modules
  • 1.5× bounty multiplier

≥ 1,000,000 $VIGIL

Warden

  • Everything in Sentinel
  • Private threat-intel channel
  • 2× bounty multiplier

Weekly holder rewards

40% of creator fees, back to holders.

Once a week, at a random time we don't announce (so nobody can buy right before it and dump right after), we snapshot every wallet holding 100,000+ $VIGIL. That week's rewards slice is sent in SOL, pro-rata to balance. Pools, the bonding curve and team wallets are excluded. Every snapshot and payout is posted on the public ledger.

  1. 01Hold 100K+
  2. 02Random weekly snapshot
  3. 03SOL to your wallet

Where creator fees go

pump.fun fee sharing, locked split

  • 40% Holder rewardsweekly SOL to 100K+ holders, pro-rata
  • 35% Infrastructureprivate RPC nodes for Wallet Watch, threat-intel feed, audit + bug bounty, hosting
  • 25% Build & bountiesshipping the extension + Vigil Watch drainer bounties

Public fee ledger goes live at launch: every claim, snapshot and payout on the record. No promises about price, ever.

  • 1Bsupply
  • pump.funfair launch
  • 0presale / VC

06 · Install

Install v0.1 in about a minute.

Free. No account. Read the code before you load it: it's all in the zip.

  1. 1
  2. 2
    Unzip it somewhere you'll keep it. Delete the folder and the extension goes with it.
  3. 3
    Open the extensions page. Paste into your address bar:
  4. 4
    Turn on Developer mode (toggle, top right; on Edge it's in the left sidebar).
  5. 5
    Click Load unpacked and pick the unzipped folder, the one with manifest.json inside.
  6. 6
    Pin VIGIL. Puzzle icon → pin. Open any dApp and watch the counter.

07 · Roadmap

Ship, harden, share.

  1. TODAY

    v0.1

    Every guard, including the new Link Guard. Unpacked install from the zip.

  2. NEXT

    Chrome Web Store

    Submission next. One-click install and auto-updates once approved.

  3. THEN

    Funded audit

    Paid from the 20% Audits & Bug Bounty slice.

  4. THEN

    Shared threat feed

    Verified Vigil Watch reports flow back to every install.

  5. LATER

    Mobile / in-wallet SDK

    The same guards where you sign on your phone.

08 · FAQ

Straight answers.

Does VIGIL see my keys or seed phrase?

No. VIGIL never touches keys or seed phrases. It sits between the site and your wallet, reads what the site asks for, and your wallet still does all the signing.

Does it send my address anywhere?

No. Your addresses, ledger, leak log and settings stay in your browser's local extension storage. VIGIL never ships your address to us or anyone else. The one exception is Holder Check, and only when you run it yourself (next answer).

So what does it connect to at all?

Two things. Price lookups by token contract (DefiLlama) to estimate exposure: no wallet address in the request, and you can switch it off. Holder Check: a public Solana RPC call you trigger yourself, which carries the address you paste. Set your own RPC if you prefer.

Is it a mixer? Does it make me anonymous?

No. VIGIL doesn't touch your funds or your on-chain history, which stays as public as ever. It's metadata privacy and signing safety in your browser: legal, local-first. It stops websites from quietly linking your address to your browsing, warns before you link your own wallets, and stops bad signatures before they leave.

Does it replace my wallet?

No. Keep Phantom, MetaMask or any Wallet Standard / EIP-1193 wallet. VIGIL sits in front of it.

Do I need $VIGIL to use it?

No. Every guard, Wallet Watch and the Evidence Pack are free for everyone. Holding 100,000+ $VIGIL adds weekly SOL rewards from creator fees, roadmap votes, early access and bounty multipliers.

Is it audited?

Not yet. A security audit is on the roadmap, funded from the 20% Audits & Bug Bounty slice. Until then the code is open: read it before you load it.

Will it break sites?

Some dApps won't show your address until you click Connect. That's the point. Mark a site trusted and Ghost Mode steps aside for it.