What happened
Compromised Safe{Wallet} UI; signers blind-signed a delegatecall that swapped the Safe's masterCopy.
Transaction-level mechanics
Public post-incident disclosures do not include full transaction calldata or execution traces for this incident.
TODO: Add exact Safe transaction hash, decoded actions, and the on-chain state changes once verified primary sources are available. For now, the attack vector summary above is derived from public reporting.
What independent decoding / hash verification / config scanning would have caught
Flagship case. Independent decode would have shown a delegatecall + implementation change instead of a routine transfer; recomputing the SafeTxHash on a clean device would not match the intended transaction. Exactly the gap this tool targets.
Verdict
Could have helped