What you see is what you sign.

A signature in crypto is final. Whatever transaction a wallet signs, the network executes, and most stolen funds move through signatures their owners approved without reading. A phishing approval works because the screen shows one thing while the transaction says another.

SciPHR closes that gap on the device. Before any signature, the app independently decodes the raw transaction and displays every field that matters: destination, amount, fee, network. The signing key is released only after a live Face ID, and only over the exact bytes shown.

The backend never holds a key, so the worst a compromised server can do is propose a transaction. The device decodes it, shows it in full, and can refuse.

A signature should be an informed decision, and the only place to guarantee that is the device the user already holds.