
Company News
Socket Joins New OpenJS Program to Fund Node.js Security Work
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.
@txkit/tx-decoder
Advanced tools
Decode raw EVM calldata into PreparedTransaction clearSigning trees. ERC-7730 registry loader, ABI-based fallback decoder. Zero React or wagmi deps.
Decode raw EVM calldata into structured DecodedCall trees compatible with @txkit/tx-protocol clearSigning fields.
v0.1.0-alpha - shape and surface may shift before v1.0.
Takes an EvmCall ({to, data, value}) plus a chain ID, returns a DecodedCall with:
clearSigning rulesLookup order:
abi option (highest priority)(chain, to) (loaded JSON descriptors)fourByte resolver fallbacknpm install @txkit/tx-decoder@alpha @txkit/tx-protocol@alpha viem
import { decodeCall, buildRegistry } from '@txkit/tx-decoder'
const result = await decodeCall(
{
call: { to: '0x...', data: '0xa9059cbb...' },
chain: 'eip155:1',
},
{ abi: erc20Abi },
)
// {
// selector: '0xa9059cbb',
// functionName: 'transfer',
// args: [
// { name: 'to', type: 'address', value: '0x...' },
// { name: 'amount', type: 'uint256', value: 1000000000000000000n },
// ],
// source: 'abi-prop',
// }
BUILTIN_REGISTRY ships with 20 descriptors covering high-volume mainnet + L2 contracts across 6 mainstream protocols:
| Protocol | Coverage | Chains |
|---|---|---|
| ERC-20 standard (USDC / WETH / USDT) | transfer / approve / transferFrom / deposit / withdraw | Ethereum mainnet |
| Permit2 (Uniswap signed approvals) | permit (single-token variant) | Ethereum + Arbitrum + Base + Optimism + Polygon |
| Uniswap V3 SwapRouter02 | exactInputSingle / exactInput / exactOutputSingle / multicall | Ethereum + Arbitrum + Optimism + Polygon + Base |
| Aave V3 Pool | supply / withdraw | Ethereum + Arbitrum + Optimism + Polygon + Base |
| CoW Swap ETH Flow | createOrder / invalidateOrder (validated against StakeWise frontwise production) | Ethereum + Gnosis |
Each entry ships as a JSON file under src/registry/data/ with ERC-7730-style clear-signing rules. Coverage will expand iteratively - open a PR with additional descriptors as new protocols ship.
The Buildathon AgentPolicyGate decoder data is intentionally not bundled here: it lives in examples/arbitrum-london/decoder-data/ and is loaded by the example app only, so consumers do not hit a placeholder-address descriptor before Mike's deploy.
Next protocols on the registry queue (alpha.5+):
Functional with built-in registry. The decoder API surface is stable; registry data files are append-only and curated in PRs.
FAQs
Decode raw EVM calldata into PreparedTransaction clearSigning trees. ERC-7730 registry loader, ABI-based fallback decoder. Zero React or wagmi deps.
The npm package @txkit/tx-decoder receives a total of 7 weekly downloads. As such, @txkit/tx-decoder popularity was classified as not popular.
We found that @txkit/tx-decoder demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Company News
Socket is joining the OpenJS Security Stewardship Program to fund Node.js vulnerability research, maintainer remediation, and security releases.

Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.

Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.