Enforceable Human-Readable Transactions: how to solve Bybit-like hacks

Submit
ethresear.ch

Enforceable human-readable transactions: How to solve Bybit-like hacks

AI summary of the linked article

Each application would embed an enforceable, human-readable description in the messages users sign, and its smart contract would reject any signature where that description does not match the transaction data. The approach responds to the $1.5 billion Ethereum theft, in which spoofed front-ends tricked signers while the wallet displayed the data correctly. The description is recomputed from the input data on-chain, so it needs no extra data availability, though each transaction gains computational overhead and users must sign twice, a problem the upcoming Pectra fork may help address. The text says the technique suits Cartesi application-specific rollups, which offer dedicated blockspace.

Recommended by 1 curator
avatar
It’s good that have a discussion on this now. Today I read a post by @polynya more sophisticated rate-limiting features on Safe and competing multisig wallets - with access for non-coders.