VIGIL
Install Buy
Nov 4, 2026 Reported: House Democrats are weighing a new crypto bill with more SEC power and a smaller CFTC. Washington is fighting over who polices crypto. source ↗

Wallet privacy firewall · v0.1 · 100% free + open source

Your wallet snitches.
VIGIL shuts it up.

No site, tracker, drainer or hacker gets your wallet without you. Read guard on every site. Leak guard on every request. Sign guard on every signature.

Whoever wins in Washington, nothing in that fight protects you today. Any site you've ever connected can read your address the second it loads, no click, then ship it to analytics vendors. VIGIL blocks the silent read, kills known trackers and decodes every signature before you sign. Runs locally. Never touches your keys.

Launch in LIVE

6:00 PM CST your time: …

Install v0.1
$VIGIL launching 6:00 PM CST Buy

Fair launch on pump.fun · 1B supply · no presale · no VC

Chrome · Brave · Edge  /  Phantom · MetaMask · any Wallet Standard or EIP-1193 wallet

SILENT READ ✕ BLOCKEDYOU CLICKED CONNECT ✓TRACKER ✕ KILLED

NEW 01 · Link Guard · ships today in v0.1

Shielded pools hide the transfer. Your browser re-links you.

Most wallet privacy isn't lost to broken cryptography. It's lost to small mistakes: one transfer, one double connect, one matching amount. Link Guard catches them before you sign.

MAINBURNERLINK GUARD ✕ NOT LINKED
Link GuardSelf-link warning illustration

Main → Burner

Both wallets are yours. This transfer ties them together on-chain, forever.

CANCEL send anyway?
  1. 01

    Self-link warning

    About to send between two of your own wallets, like funding a fresh burner from your main? VIGIL warns you first: that transfer ties both wallets together on-chain, for good.

  2. 02

    Site cross-link alert

    Connected your main and your burner to the same site? VIGIL tells you that site has now seen both wallets and can link them.

  3. 03

    Amount match

    Sending the exact amount your other wallet sent recently? Matching amounts are one of the easiest ways deposits and withdrawals get linked. VIGIL tells you to change it.

Different layers

On-chain privacy hides the money. VIGIL guards the browser. Use both.

On-chain privacy tools work on the chain. VIGIL works where your address actually leaks and where the mistakes happen: in the browser, before you sign.

Capability On-chain privacy tools VIGIL
Hides transfers on-chain ✓ use them together
Stops sites silently reading your address — ✓
Shows who received your address — ✓
Decodes and blocks drainer-style signatures — ✓
Warns before you link your own wallets NEW — ✓
Blurs addresses on stream — ✓

Compared by category, not any specific product. Some tools cover part of this; check yours.

NEW Incident response · ships today in v0.1

Oct 29 didn't end on Oct 29.

On 29 Oct 2026 Binance lost about $6.3B (Binance's estimate) from hot wallets across ~10 chains in ~20 minutes, the largest crypto theft on record. Binance said about $3B was verified frozen as of 29–30 Oct. Frozen is not returned.

Taint Guard · threat feed FEED

FBI-flagged addresses in VIGIL

608 EVM · 19 Bitcoin · 1 Solana

  1. Theft starts
  2. Bulk of the hot wallets drained, ~10 chains
  3. FBI names North Korea's TraderTraitor and publishes 628 addresses
  4. VIGIL ships with the list

feed updated … verify ↗

FBI alert ↗
REPORTED

Since the theft: stolen funds laundered through bridges and swaps, issuers blacklisting addresses, exchanges intercepting transfers, and fake "Binance refund / compensation / claim" pages.

  1. 01

    Taint Guard

    VIGIL carries all 628 FBI-listed addresses. Before you send to, approve, or swap with one, you get a critical warning: touching hacker funds can get your own wallet frozen or flagged by exchanges.

  2. 02

    Incident Mode

    Fake "Binance refund", "compensation" and "claim" pages get a red alert, and any signature on them is stopped. Binance will never ask you to connect a self-custody wallet or sign anything to get money back.

  3. 03

    Live threat feed

    The list lives at getvigil.pages.dev/feed/threats.json and every VIGIL install re-checks it hourly. Open and public: anyone can read it. Paid for by the 35% infrastructure slice.

  4. 04

    Evidence Pack + Wallet Watch

    Freezes work in minutes to hours, so speed matters. If something hits you, export your evidence in one click. Wallet Watch flags new delegates and takeovers 24/7.

NEW Payout Shield · ships today in v0.1

Getting paid in stablecoins? Guard the address.

On 4 Nov 2026 Stripe announced that US businesses can send stablecoin payouts (USDC, OUSD) directly to crypto wallets in 160+ markets through Global Payouts, in public preview. Reported chains include Solana, Base, Ethereum, Arbitrum, Optimism and Polygon.source ↗

PAYOUT SHIELDpaste checkillustration
Receiving address
7xKpR2vq…H8nd9fQ2✓ yours

Matches a wallet you use.

Receiving address
7xKpTz5c…W1ka9fQ2✗ lookalike

Same start and end as yours, different wallet. Clipboard malware or address poisoning swapped it.

Receiving address
0x007f2ca1…107941✗ FBI list

Listed by the FBI as holding or having held stolen funds.

Paste a wallet into any payout or "receiving address" form and VIGIL checks it against the wallets you actually use.

  • Yours. Green check: it matches one of your wallets.

  • Lookalike. Red alert: it imitates one of yours. Clipboard malware and address poisoning swap the address so your payout lands with an attacker.

  • Flagged. Red alert: it's on the FBI list.

Link Guard tip: getting paid by a KYC'd business ties your name to that wallet. Use a dedicated payout wallet and don't send straight from it to your main. Link Guard warns you when you do.

VIGIL is not affiliated with Stripe. Payout Shield works on any site's address field.

02 · The leak

What your wallet leaks.

Open a dApp you've used before. Before you click anything, the page can ask your wallet who you are and forward the answer to whoever it likes. VIGIL sits in that gap and logs every move.

vigil://feed DEMO · example events
1,325 of the top 100K sites probed for wallets in one academic crawl.arXiv 2306.08170
0 clicks a site you've connected before needs to read your address again.
∞ how long a signed durable-nonce transaction can sit before someone sends it.

03 · The guards

Every guard. One extension.

Read guard on every site. Leak guard on every request. Sign guard on every signature.

NEW

Signer Shield

For anyone who signs for a multisig: VIGIL decodes the REAL Safe transaction, not the website's. Delegatecalls to unknown contracts (the Bybit pattern), owner and threshold swaps, module and logic changes: flagged before you sign.

NEW

Taint Guard

All 628 addresses the FBI tied to the Binance theft, in a live feed. Send to, approve or paste one and VIGIL stops you before your own wallet gets frozen.

NEW

Payout Shield

Getting paid in stablecoins? Paste your receiving address and VIGIL confirms it's yours, and alerts on lookalikes and flagged addresses.

NEW

Link Guard

Warns before you tie your own wallets together: self-transfers, one site seeing two of your wallets, and amounts that match your other wallet's.

READ

Ghost Mode

Sites can't read your address until you click Connect. Silent reads, eager connects, auto-connect: blocked. Trusted sites skip it.

LEAK

Leak Radar

Every third-party server your address was sent to, grouped site → receiver, tagged tracker / RPC / third-party. Leak Block cuts requests carrying it in the URL.

LEAK

Tracker Kill

Blocks known wallet-analytics SDK hosts at the network layer. Add your own domains.

SIGN

Sign Guard

Decodes permits, Permit2, Seaport, approvals, 7702 auths, blind eth_sign, durable-nonce and SPL authority changes before you sign. Critical = blocked by default.

SIGN

Sleeping Signature Ledger

Every off-chain signature you've handed out, with spender, amount and deadline. Kill switch burns the nonce or revokes in one click.

SIGN

Delegation Scan

On connect, checks your EVM account for an EIP-7702 delegation and names the delegate.

READ

Link Shield

Clicked in from X, Telegram or Discord? Signing warnings escalate. Lookalike and punycode domains get flagged.

SIGN

Payee Vault

Save who you pay. Lookalike recipients (address poisoning) get flagged on paste and in transfers.

PRIVACY

Screen Shield

One toggle blurs every wallet address on screen, full or shortened. Stream, screenshot and post PnL without doxxing your wallet.

$VIGIL

Holder Check

Paste a Solana address. VIGIL reads your $VIGIL balance over public RPC and shows your tier.

NEW · free for everyone

Wallet Watch. 24/7, for free.

Signed something on your phone last month? VIGIL re-checks every wallet you use, every 15 minutes, for live token delegates, close authorities, wallet takeovers and EIP-7702 delegations, and pings you the moment a new one appears. No subscription. No account. Turn on Auto in the Holder tab.

04 · The attacks

Two signatures your revoke tool can't see.

Revokers scan the chain. These live off it until the moment they drain you.

Attack 01 · Solana

The transaction that never expires.

A normal Solana transaction dies in about a minute: its blockhash goes stale. A durable-nonce transaction doesn't. It stays valid until the nonce moves, so a signature you give today can be sent next month.

REPORTED

Drift, 1 Apr 2026. Losses reported at $270M+, tied to pre-signed durable-nonce transactions that sat waiting.

VIGIL: tags every durable-nonce tx "never expires", blocks it by default and logs it in the Ledger. Nonce-authority and SPL owner changes get the same treatment.

CRITICALSign Guardillustration

Durable-nonce transaction

This transaction never expires. Whoever holds it can submit it at any time.

  • nonce account9pQx…Lm2a
  • also insideSPL SetAuthority → owner change
  • arrived fromt.co (outside link)
BLOCKED

Attack 02 · EVM

The permit that hides off-chain.

Permit, Permit2 and Seaport orders are signatures, not transactions. Nothing touches the chain until the attacker spends it, so on-chain approval checkers show you clean while a live permit sits in someone's database.

PATTERN

Sign a "gasless listing" or "claim" message, look at your approvals, see nothing. That's the trap.

VIGIL: decodes the permit before you sign, logs every one you do sign in the Sleeping Signature Ledger, and the kill switch invalidates Permit2 nonces or burns an EIP-2612 nonce before it gets used.

LIVESleeping Signature Ledgerillustration

Permit2 allowance · USDC

  • amountunlimited
  • spender0x7a3f…c91e plain wallet
  • deadline2027-05-01
KILL SWITCH invalidate nonce → 1 tx

Proof · check it yourself

Don't trust. Verify.

Every number in this section links to its source: the fee split, the fee wallets, the market, the threat feed and the code. Check each one yourself.

The flywheel

FEE SPLIT 40·35·25 Moreinstalls Morevolume Morecreatorfees 40% holders35% infra25% build Strongerprotection
  • 40% Holder rewardsweekly, in SOL, to 100K+ holders, pro-rata
  • 35% Infrastructureprivate RPCs, threat feed, audit
  • 25% Build & bountiesshipping the extension + drainer bounties
$VIGIL marketlive from DexScreener
Price
—
Market cap
—
24h volume
—
24h txns (buys / sells)
—

goes live at 6:00 PM CST

Fee split · locked on-chainpending

40 / 35 / 25

Holders / infrastructure / build. pump.fun fee sharing, locked in one on-chain transaction.

posting at launch

Threat feedFEED

628

FBI-listed addresses in the public feed. Every VIGIL install re-checks it hourly.

updated …verify ↗

Fee wallets · live SOL balancepublic RPC
  • Holder rewards · 40%posting at launch
  • Infrastructure · 35%posting at launch
  • Build & bounties · 25%posting at launch
Open code + testsMIT

Every line ships in the zip (MIT). 76 attack-pattern checks + 13 real-browser checks pass on this build.

verify: zip ↗

No telemetry. VIGIL never phones home, so we will never show you made-up user counts. Every number here comes from the chain or a public file.

05 · $VIGIL

The tool is free. Holders get 40% of the fees.

Every guard, Wallet Watch and the Evidence Pack are free for everyone, forever. Creator fees go back to the people holding $VIGIL and into the infrastructure that keeps VIGIL running.

≥ 100,000 $VIGIL

Holder

  • Weekly SOL rewards, pro-rata to your balance
  • Vote on what VIGIL builds next
  • Vigil Watch bounties at 1×

≥ 250,000 $VIGIL

Sentinel

  • Everything in Holder
  • Early access to new modules
  • 1.5× bounty multiplier

≥ 1,000,000 $VIGIL

Warden

  • Everything in Sentinel
  • Private threat-intel channel
  • 2× bounty multiplier

Weekly holder rewards

40% of creator fees, back to holders.

Once a week, at a random time we don't announce (so nobody can buy right before it and dump right after), we snapshot every wallet holding 100,000+ $VIGIL. That week's rewards slice is sent in SOL, pro-rata to balance. Pools, the bonding curve and team wallets are excluded. Every snapshot and payout is posted on the public ledger.

  1. 01Hold 100K+
  2. 02Random weekly snapshot
  3. 03SOL to your wallet

Where creator fees go

pump.fun fee sharing, locked split

  • 40% Holder rewardsweekly SOL to 100K+ holders, pro-rata
  • 35% Infrastructureprivate RPC nodes for Wallet Watch, threat-intel feed, audit + bug bounty, hosting
  • 25% Build & bountiesshipping the extension + Vigil Watch drainer bounties

Public fee ledger goes live at launch: every claim, snapshot and payout on the record. No promises about price, ever.

  • 1Bsupply
  • pump.funfair launch
  • 0presale / VC

06 · Install

Install v0.1 in about a minute.

Free. No account. Read the code before you load it: it's all in the zip.

  1. 1
  2. 2
    Unzip it somewhere you'll keep it. Delete the folder and the extension goes with it.
  3. 3
    Open the extensions page. Paste into your address bar:
  4. 4
    Turn on Developer mode (toggle, top right; on Edge it's in the left sidebar).
  5. 5
    Click Load unpacked and pick the unzipped folder, the one with manifest.json inside.
  6. 6
    Pin VIGIL. Puzzle icon → pin. Open any dApp and watch the counter.

07 · Roadmap

Ship, harden, share.

  1. TODAY

    v0.1

    Every guard, including the new Link Guard. Unpacked install from the zip.

  2. NEXT

    Chrome Web Store

    Submission next. One-click install and auto-updates once approved.

  3. THEN

    Funded audit

    Paid from the 35% infrastructure slice.

  4. THEN

    Shared threat feed

    Verified Vigil Watch reports flow back to every install.

  5. LATER

    Mobile / in-wallet SDK

    The same guards where you sign on your phone.

08 · FAQ

Straight answers.

Does VIGIL see my keys or seed phrase?

No. VIGIL never touches keys or seed phrases. It sits between the site and your wallet, reads what the site asks for, and your wallet still does all the signing.

Does it send my address anywhere?

No. Your addresses, ledger, leak log and settings stay in your browser's local extension storage. VIGIL never ships your address to us or anyone else. The one exception is Holder Check, and only when you run it yourself (next answer).

So what does it connect to at all?

Two things. Price lookups by token contract (DefiLlama) to estimate exposure: no wallet address in the request, and you can switch it off. Holder Check: a public Solana RPC call you trigger yourself, which carries the address you paste. Set your own RPC if you prefer.

Is it a mixer? Does it make me anonymous?

No. VIGIL doesn't touch your funds or your on-chain history, which stays as public as ever. It's metadata privacy and signing safety in your browser: legal, local-first. It stops websites from quietly linking your address to your browsing, warns before you link your own wallets, and stops bad signatures before they leave.

Does it replace my wallet?

No. Keep Phantom, MetaMask or any Wallet Standard / EIP-1193 wallet. VIGIL sits in front of it.

Do I need $VIGIL to use it?

No. Every guard, Wallet Watch and the Evidence Pack are free for everyone. Holding 100,000+ $VIGIL adds weekly SOL rewards from creator fees, roadmap votes, early access and bounty multipliers.

What can't VIGIL do?

It is not anonymity: on-chain activity stays public. It can't stop malware on your computer, a stolen seed phrase, or an exchange getting hacked. In-page protection is a strong extra layer, not a guarantee: your wallet's own screen and your hardware wallet are the last gate. And "not on the threat feed" never means "safe". We tell you what we can't do so you can trust what we can.

Is it audited?

Not yet. A security audit is on the roadmap, funded from the 35% infrastructure slice. Until then the code is open: read it before you load it.

Will it break sites?

Some dApps won't show your address until you click Connect. That's the point. Mark a site trusted and Ghost Mode steps aside for it.