Canary

Send the canary first.

Canary is a browser extension for Solana. Before a new site ever sees your real wallet, it shows the site a decoy, listens to what the site tries, and tells you in plain words.

When the canary goes quiet, don't connect.

See it work Check a link

♫ Move your mouse. The canary will follow.

Fake sites look real. The only way to know is to test them.

Miners used to send a canary down the shaft first. If it went quiet, they turned back. Canary does the same for fake mints, fake airdrops and fake wallet apps, before your real wallet is anywhere near them.

Three tests. Before you connect.

1

Ask around

What do other people say about this site? Canary checks scam reports and community vouches. If nobody has looked at it yet, it tells you so and walks you through a quick check of your own.

2

Spot the fake

Look-alike spelling, brand-new domains, address tricks. If a site is dressed up as something it isn't, Canary notices.

3

Send the canary

Canary shows the site a decoy wallet with a small balance. If the site tries to take it, or asks for something it shouldn't, you hear about it before your real wallet is involved, in plain words.

Watch a fake airdrop fail the tests.

Scroll. The canary goes in first.

  1. 1Ask aroundOther people have reported this site.
  2. 2Spot the fakeLook-alike letters get circled.
  3. 3Send the canaryA decoy goes in. The request gets read out.

See Canary in action

Pick a scam. Hit Connect. Watch the canary work.

See it at the door

This is what Canary does the moment a site asks for your wallet.

Your recovery phrase never goes on a website.

If you type or paste your 12 or 24 recovery words into a web page, Canary stops you before the page can read them. Almost no website ever needs them.

If a page asks anyway, Canary can hand it a decoy phrase instead, and tell you if a scam site ever tries to use it.

See it work

Try to fool the canary

Hit Connect on this scam site and watch Canary stop you.

The Ear gets sharper

Every confirmed scam teaches Canary a new warning call. Sites built from the same kit, using the same wallets or the same tricks get caught faster next time.

Warning calls

Send the canary first.

See what you get

Questions

See Canary in action

Pick a scam. Hit Connect. Watch the canary work.

    Check a link

    Paste a site address. The canary takes a look.

    Paste the address of the site that's asking you to connect.

    How Canary decides

    "Silent" if the site is reported, blocklisted or a close look-alike of a well-known site. "Ruffled" if there are two or more softer flags, like a brand-new domain, scam-style words or no reviews. Otherwise "Singing". Every flag is listed above, with its reason.

    The seed phrase stopper

    See what happens when a recovery phrase lands on a web page.

    Never type your real recovery phrase anywhere on this site. Use the test words. Nothing here is stored or sent.

    What the stopper does

    If you type or paste 12 or 24 recovery words into a web page, Canary stops you before the page can read them. Almost no website ever needs them.

    Decoys and the tripwire

    When the stopper catches a phrase, Canary can scramble up a decoy and hand that to the page instead. It is made up from scratch, not a scrambled copy of yours, so it gives away nothing about your real phrase and opens none of your wallets.

    Canary then keeps watch on the decoy. If a site tries to use it, you get a notification right away.

    Report a site

    Help the Ear learn.

    Warning calls

    What the Ear has learned so far.

    How a call is learned

    1. Reported.
    2. Checked.
    3. Matched with similar sites.
    4. Added to the Ear.

    The feed

    How Canary works

    1

    Install

    Add Canary to Chrome.

    2

    Browse

    It stays quiet until a site asks to connect or sign.

    3

    Test

    Three tests run, with a decoy wallet, before your real one connects.

    4

    Decide

    Singing, Ruffled or Silent, with reasons. You choose.

    What Canary watches for

    • Look-alike addresses
    • Brand-new domains
    • Sites reported by others
    • Requests that let a site move all your tokens
    • Recovery phrases typed into web pages
    • Sites that try to use a decoy phrase you gave them

    What the extension can see

    The address of the site you're on, and when that site asks to connect or sign. It does not read your passwords or your keys.

    The three verdicts

    Canary warns. You decide. It can't see everything, so never sign something you don't understand.

    Add Canary

    1

    Install

    Add Canary to Chrome.

    2

    Pin it

    Pin the canary to your toolbar so you can always see it.

    3

    Browse as usual

    Canary stays quiet until a site asks for your wallet.

    What it can see

    • The address of the site you're on
    • When that site asks to connect or sign

    What it never touches

    • Your passwords
    • Your seed phrase or private keys
    • Your funds. It never moves them

    See it at the door

    This is what Canary does the moment a site asks for your wallet.

    Roadmap

    Now: ChromeNext: alerts when something changes on your walletLater: other browsers