For: anyone about to sign. Goal: know that what your wallet is asking you to sign is what StampDEX told you it was. Prerequisites: a transaction on screen. Chain and network: Bitcoin mainnet.
Safety: this is the last point at which anything is reversible. After you sign and broadcast, Bitcoin decides.
StampDEX builds transactions. Your wallet displays them and signs them, or refuses. Nothing spends your funds without a signature made in your wallet. So the review screen and the wallet screen must agree, and if they do not, the correct action is to refuse.
The escrow address pays what it holds: the buyer’s payment, locked when the trade started. Only the venue’s escrow key can spend it, which is why neither side can run off with both sides of the trade.
Fixture value: 24,546 sats
The seller’s proceeds: the listing total minus the 1.5% seller service fee. This output pays to an address the seller controls.
Fixture value: 12,000 sats
The venue’s 1.5% service fee for this side of the trade, a separate output so it is visible before you sign rather than hidden inside an exchange rate.
Fixture value: 180 sats
A nearly-zero-value output carrying the SRC-20 transfer inscription: the tokens moving from escrow to the buyer. The protocol reads the amount from the inscription, not from the sats.
Fixture value: 546 sats (carrier output)
If the escrow overpaid the fee rate, the change returns to the escrow first and is swept to the buyer in the recovery flow. A change output is normal, not a red flag.
Fixture value: 1,820 sats
| Part | Side of the trade | Fixture value |
|---|---|---|
| Escrow input | held by StampDEX | 24,546 sats |
| Seller payout | seller side | 12,000 sats |
| Service fee | held by StampDEX | 180 sats |
| SRC-20 transfer output | buyer side | 546 sats (carrier output) |
| Change | settled on Bitcoin | 1,820 sats |
A controlled example for orientation, not a live or signable transaction. What the review panel shows before your wallet opens is the real transaction; compare it against the checklist.
| Check | Why |
|---|---|
| The total amount leaving your wallet | It should equal the listing total plus your service fee plus the network fee |
| The destination address | It should match the payment address on the review panel |
| The fee rate | You chose it. A rate you did not choose is a reason to stop |
| Nothing else is being spent | A buy should not touch unrelated outputs |
| Check | Why |
|---|---|
| Only your one anchor input is signed | The listing uses SIGHASH_ALL | ANYONECANPAY on your input alone |
| The token amount | It should match what you typed |
| The escrow addresses | They are the ones the prepare step returned, not addresses that arrived later |
If your wallet cannot show you an unfinalized PSBT clearly, that is a wallet limitation, not a reason to sign blind.
Every SRC-20 settlement carries the service fee as its own output to a fixed pay-to-Taproot address:
bc1pl0xdhr5delrk80d6s5h5qa9awsf7qzc45jl8na6ns8vp3e0vv7wqxattxyIt is a constant, not a per-user address, and it is visible on chain in every SRC-20 settlement and in every deploy, mint, or transfer StampDEX builds. You can check it yourself in any explorer. A transaction claiming a StampDEX service fee to a different address is not one of ours.
An SRC-20 transaction has several tiny outputs. They carry the protocol’s data and markers, not value:
| Output | Value | What it is |
|---|---|---|
| Recipient marker | 330 sats | The output the SRC-20 transfer credits |
| Data chunks | 330 sats each | The pay-to-witness-script-hash outputs carrying the encoded transfer |
| Seller anchor | 548 sats | The marker output the listing flow spends and returns |
Seeing a handful of 330 and 548 sat outputs in a token transaction is normal. Seeing them in a plain BTC send is not.
Cancelling a listing, and every other mutation, asks your wallet to sign a short text message rather than a transaction. That message names the action, your address, a hash of the exact request, a single-use value, and an expiry. It cannot move funds, and it works once. If you are asked to sign the same challenge twice, something failed in between; read the order state before retrying.
No wallet needs your recovery phrase or a private key to work with StampDEX, and StampDEX never asks for either. If any page, in any tab, asks you to type a recovery phrase or import a seed in order to trade, close it.