Warnings › Programs it does not know

Unknown programs: blocked, not guessed

Published 25 October 2026

SignLens explains a program from a reviewed description of its instructions. When a transaction calls a program it has none for, it cannot say what that program will do with your accounts, so it says exactly that, and blocks the request by default. You can still choose "Continue anyway".

A drainer's own program is unknown by nature, and the instructions that do the damage can run inside it, where no preview of the transaction's top level shows them. That is how the November 2025 owner-change phishing worked: its transaction called the attacker's program three times, and SignLens blocks it with a critical finding for each (the case, read by SignLens).

New and small dapps are unknown too, so a block is not a verdict that a dapp is malicious: it says SignLens cannot vouch for it. The programs SignLens explains grow with each release; the feedback strip under every explanation is how to ask for one.

Other warnings: accounts given away, spending rights, signatures that never expire, lookalike addresses, multisig approvals you cannot see, a swap paying someone else.

Try it: install SignLens for Chrome or Firefox.