How Anchorage Digital and Turnkey verify code with AWS Nitro Enclaves

This article describes how Anchorage Digital and Turnkey use AWS Nitro Enclaves to build VisualSign, an open source transaction parser that provides cryptographic proof of code execution to prevent crypto phishing attacks.

• VisualSign Parser converts raw blockchain transactions into human-readable JSON, supporting Ethereum, Solana, Sui, Tron, and other chains
• AWS Nitro Enclaves provide hardware isolation, cryptographic attestation, and no persistent storage or external networking
• Attestation documents with Platform Configuration Registers (PCRs) prove the exact, unmodified code ran inside the enclave
• Reproducible builds ensure deterministic PCR measurements, allowing independent verification of enclave software
• Anchorage Digital open-sourced awsnitroverifier, a Go library for validating Nitro attestation documents with complete chain-of-trust verification
• The attestation-gated access pattern generalizes beyond blockchain to any high-trust workflow requiring cryptographic proof of computation

The architecture enables verifiable compute for sensitive operations like transaction parsing, compliance checks, and policy evaluation by separating computation from sensitive data and using attestation as an access credential.