Safe

Safe (formerly Gnosis Safe) is the most widely used multisig wallet on EVM chains. This plugin provides read-only on-chain actions for querying Safe multisig state (owner lists, confirmation thresholds, transaction nonces, module status) and off-chain actions for monitoring pending transactions via the Safe Transaction Service API.

Unlike other protocols with fixed contract addresses, Safe wallets are deployed at user-specific addresses. You provide your Safe address when configuring the workflow action.

Supported chains for on-chain reads: Ethereum, Base, Arbitrum, Optimism. Pending transaction monitoring supports: Ethereum, Arbitrum, Optimism, Polygon, Base, BSC, Avalanche, Gnosis, Sepolia, Base Sepolia.

Setup

On-chain read actions (Get Owners, Get Threshold, etc.) require no credentials.

For Get Pending Transactions, you need a Safe Transaction Service API key:

1. Go to developer.safe.global  and create an API project
2. Copy the JWT API key
3. In KeeperHub, go to Settings > Organization > Connections and add a Safe connection
4. Paste the API key and save

Actions

Get Owners

Get the list of all owner addresses for a Safe multisig wallet.

Inputs:

Outputs:

When to use: Monitor ownership changes, verify signer lists, audit multisig configuration.

Get Threshold

Get the number of required confirmations (M of N) for executing a Safe transaction.

Inputs:

Outputs:

When to use: Monitor threshold changes, verify security settings, alert if threshold drops below expected value.

Is Owner

Check whether a specific address is an owner of the Safe multisig.

Inputs:

Outputs:

When to use: Verify address membership, monitor owner additions/removals, validate access control.

Get Nonce

Get the current transaction nonce of the Safe multisig. Each executed transaction increments the nonce.

Inputs:

Outputs:

When to use: Track transaction activity, detect new executed transactions, monitor Safe usage frequency.

Is Module Enabled

Check whether a specific module is enabled on the Safe multisig. Modules can execute transactions without owner confirmations.

Inputs:

Outputs:

When to use: Audit enabled modules, verify module installation, monitor module changes for security.

Get Pending Transactions

Fetch pending multisig transactions that have not been executed yet. Optionally filter for transactions a specific signer has not confirmed.

Inputs: Safe Address, Network, Signer Address (optional — filters for txs this address has not signed)

Outputs: success, transactions (array), count, error

Each transaction includes: safeTxHash, to, value, data, operation (0=CALL, 1=DELEGATECALL), operationLabel, nonce, confirmations, confirmationsRequired, confirmationsCollected, dataDecoded, safeTxGas, baseGas, gasPrice, gasToken, refundReceiver, submissionDate, safe

A non-zero gasPrice together with a gasToken and a refundReceiver makes execTransaction pay a refund out of the Safe and call the token contract to do it, so a hostile pair drains the Safe when the transaction is executed. The benign case is a zero gasPrice with the zero address for both gasToken and refundReceiver; check all three before signing.

When to use: Monitor your Safe for new transactions awaiting your signature, verify transaction calldata before signing, detect suspicious proposals (DELEGATECALL, proxy upgrades, unknown targets, refund parameters that pay an attacker).

Example Workflows

Monitor Safe Ownership Changes

Schedule (hourly) -> Safe: Get Owners -> Code (compare with previous) -> Condition (changed) -> Discord: Send Message

Periodically check the owner list and alert via Discord if any owners are added or removed.

Threshold Security Alert

Schedule (daily) -> Safe: Get Threshold -> Condition (< 2) -> SendGrid: Send Email

Monitor the confirmation threshold and send an email alert if it drops below a safe minimum.

Transaction Activity Tracker

Schedule (every 10 min) -> Safe: Get Nonce -> Condition (> previous nonce) -> Discord: Send Message

Track the Safe nonce to detect newly executed transactions and notify your team in real time.

Pending Transaction Verification

Schedule (every 5 min)
  -> Safe: Get Pending Transactions (signer = your address)
  -> For Each: pending transaction
    -> Decode Calldata: {{GetPendingTransactions.transactions.data}}
    -> Assess Transaction Risk: decoded calldata + context
    -> Condition: operation == 1 (DELEGATECALL) OR riskScore > 70
    -> Discord: "Suspicious Safe tx: {{DecodeCalldata.functionName}} on {{GetPendingTransactions.transactions.to}}"

Supported Chains

Safe wallets are deployed at unique, user-specified addresses on all chains. Provide your Safe address when configuring each action.