Don't trust. Verify.
Check a file against every reviewed version, read the escrow program and treasury straight from Solana devnet, and validate signed scan reports in your browser.
Verify a file
Drop a file you downloaded. A match means the bytes are exactly a version that passed automated review. The file is not stored.
Sign in with a wallet to verify a file
Each wallet gets 1 free verification per day (UTC), then a small SOL supplement per check. Signing in costs nothing.
Check a scan report
Every listing has a downloadable report on its Security tab. It lists the file hash, every static, sandbox and review step with timestamps, and an Ed25519 signature. This check runs in your browser.
Verify it yourself, without this page
- Signed bytes: UTF-8 of
trenchmart-scan-report:v1, a newline, thenreportas JSON with keys sorted at every level and no spaces. - Check
signature.value(base58) againstsignature.publicKey(base58) with any Ed25519 library, for example tweetnacl'ssign.detached.verify. - The public key must equal the one shown above, which our API also serves at
/api/v1/transparency. - Compare
report.version.sha256with your download. Downloads carry a license watermark for your wallet, so use the file check at the top of this page, which removes the watermark before hashing.
On-chain proof
Read live from Solana devnet by our API. Every address opens in Solana Explorer, so you can check each item yourself.
Reading devnet…