The Final Word for
Multisig Signing.
Stop crossing your fingers before every $1M signature. Safe OpenSig eliminates blind signing for signers who can't afford a mistake.
Free and open source.
Trusted by professional treasury managers and foundations
"OpenSig makes hardware wallet signing with Safe actually usable. We need more shots on target for the blind signing problem, and this one lands."
Jan
Safe Foundation
Your Ledger shows a hash.
Not what it means.
Every Safe multisig transaction ends the same way. You review a hash on a small screen and press confirm. You trust the interface showed you the truth. You hope nothing was tampered with between the browser and your device.
What the interface shows
Send 100.00 USDC
to 0xAb92...3f1d
What your Ledger shows
Review transaction
0x7f4e8d2a9c1b...
Reject
Approve
Blind signing is how treasuries lose funds. The Bybit treasury lost $1.4B because signers confirmed a hash without verifying its consequences. The frontend showed one transaction. The contract executed another.
End Blind Signing.
Verify Every Consequence.
Four independent verification mechanisms. Each one catches what the others miss.
Reveal the truth.
Raw transaction data is just bytes and hex. You trust your wallet to decode it, but that trust can be exploited.
Safe OpenSig runs a local EVM simulation. See what tokens will transfer, what approvals will be granted, whether the transaction is malicious.
Know before you commit.
Zero discrepancy.
Safe OpenSig shows a pixel perfect mirror of your Ledger Nano S, S+, or X before you sign.
Works with the Ledger you already own.
Trust math, not providers.
Most wallets trust a single RPC provider. If it's compromised, you're signing based on lies.
Safe OpenSig verifies against multiple independent nodes using cryptographic proofs. All nodes must agree, or the simulation is rejected.
Mathematical certainty. Not hope.
Compromised?
Isolated
Independent. Isolated. Secure.
OpenSig runs on your phone, completely separate from the browser where you use Safe. A compromised browser can't reach it.
Your verification channel is physically isolated from your signing environment.
No shared execution context.
Four steps. One verification.
Construct
Build your transaction in the Safe UI as usual. Nothing changes.
Simulate
OpenSig runs a local EVM simulation. See a human-readable summary of what will happen.
Verify
Results are validated against independent nodes with cryptographic proofs.
Preview
See a 1:1 mirror of your Ledger screen before you commit. Then sign with confidence.
Current workflow vs. OpenSig.
Confirm hash on Ledger. Hope it matches.
Full simulation with exact asset movements.
Small screen, truncated addresses.
Full display with complete breakdown.
No defense. Interface lies, you sign.
Independent verification on a separate device.
No record of what signers verified.
Cryptographic proof of what was shown.
What people are saying
Blind signing must die. The Safe ecosystem is working to solve this problem and Candide's OpenSig does exactly this.
Blind signing has been a weak point in onchain security for far too long. Today, @candidelabs is releasing Safe OpenSig, a verification instrument for Safe multisig signers. Proud to have supported the team building this.
It is kind of crazy that blind signing was ever treated as an acceptable default. Good to see @candidelabs ship Safe OpenSig for Safe multisig signers. Useful product. Real problem.
OpenSig is amazing; it shows you all kinds of warnings like: balance, approvals, allowances, owner changes, contract implementation changes and a final byte by byte comparison for your ledger device. Blind signing is a real problem and @candidelabs are solving it.
certified banger
I tried the app and was really impressed with the UX. I just loved it.
Verify, Don't Trust.
Others charge 0.05% per signature. On $5M, that's $2,500 every time.
OpenSig has no fees per transaction. No markup on gas. No variable fee on transfers. No third-parties, period.
Pro is free for a limited time during launch.
Community
$0
forever
Pro
$49 $0
per seat / month
Institution
$10k
per team / year
A clarity layer. Not a wallet.
Sign with certainty.
OpenSig doesn't replace Safe. It gives every signer the verification they deserve. Free and open source.
iOS and Android. Works with Ledger Nano S, S+, and X.
Safe is a trademark of the Safe Ecosystem Foundation. Ledger, Nano S, Nano X, and Nano Plus are trademarks of Ledger SAS. Safe OpenSig is an independent verification instrument developed by Candide Labs and is not affiliated with, sponsored by, or endorsed by Safe or Ledger.