Skip to main content

Verify Before Signing

Use this guide before connecting a wallet, approving tokens, depositing, claiming, refunding, or submitting any CavalRe transaction.

Why Wallets May Warn

CavalRe is a new protocol. Some wallets and security providers may flag new or unfamiliar contracts, even when the requested transaction is expected.

Do not ignore wallet warnings. Compare the wallet details against the addresses below before continuing.

What To Verify

For Ethereum mainnet, verify:

Why Actions Use The Router

CavalRe wallet actions pass through the Router / pool contract. The Router maps function selectors to installed modules and executes the module for the selected action.

For ERC20 approvals, the Router is the spender. For transactions, the Router is the contract target. Approving a module address directly, or signing a transaction sent to an unexpected contract, is not the expected flow.

Wallet Action Checks

Connect Wallet

Connecting a wallet should not request token spending permission or submit an onchain transaction. Before connecting, verify:

  • App route: https://app.caval.re/
  • Network: Ethereum mainnet
  • No token approval or transaction is being requested during connection

Approve Token

Token approvals grant spending permission. For CavalRe deposits and swaps, the spender shown in your wallet should be the Router:

0xa4AF8D02fc28882E7b886e28816D9710fAf0Cd2d

Only continue if the spender address and approval amount match what the app shows.

Deposit

Deposits submit a transaction to the Router. Before signing, verify:

Claim Or Refund

Claims and refunds are post-deposit actions. Before signing, verify:

Multiswap

Multiswap transactions pass through the Router. Before signing, verify:

Risks

CavalRe is early-stage DeFi software. Deposits and transactions carry risks, including:

  • smart contract risk
  • wallet and signing risk
  • oracle risk
  • operational risk
  • market and liquidity risk
  • user error when verifying addresses or signing transactions

Best efforts have been made to deploy and document the protocol carefully, but verification does not remove these risks.

If Anything Differs

Stop and do not sign if:

  • the network is not Ethereum mainnet
  • the spender or transaction target does not match the Router address
  • the token or amount is unexpected
  • the app route or wallet prompt looks unfamiliar
  • the transaction asks for a broader permission than expected

Re-check the app route, Etherscan links, and deployment record before trying again.