Enhancing Security through Clear Signing
Why does your dApp or Wallet need clear signing?
Blind signing is a significant vulnerability that scammers exploit to steal funds from unsuspecting users. If the only information given to the user is the transaction hash, it is challenging for users to verify the accuracy and authenticity of the transaction before signing, because it is unreadable.
![Blind sign risk](/blind-signing-risk.png)
At Ledger, we are committed to building a secure Web3 ecosystem. That is why we have introduced clear signing standards and tools to address this issue. These tools provide user-readable and understandable data, making it easier for users to identify potential risks and verify transactions accurately.
Where to go next?
- If you work on a DApp or a wallet and want to follow the new Clear Signing initiative, read this documentation
- If you want to whitelist a smart contract in the context of EIP-712 messages clear signing, read this documentation
- For ERC721, ERC1155 and ERC20 NFTs, follow this documentation