Don't want to trade it yourself?
Our desk runs DEX portfolios on profit share.
Ethereum Foundation Funds WEBCAT Work for Wallet and App Front-End Checks
The Ethereum Foundation’s Trillion Dollar Security initiative has announced a grant allocation to the Freedom of the Press Foundation to support work on WEBCAT, an open-t a signed manifest
According to the Foundation’s Aug. 5 announcement, the funding is intended to support a verification library that Ethereum wallets can integrate, along with Chromium-browser research, implementation support, an independent audit and proposed standardization work.
Focus on front-end integrity
The Foundation described a gap between encrypted website connections and verification that the code delivered by a site matches code approved by its developers. It said a compromised web interface could alter a recipient address or present users with a signature request that differs from what the interface displayed.
WEBCAT, short for web-based code assurance and transparency, is intended to let a browser compare repost says its current alpha Firefox extension blocks a page and warns the user if verification fails
Wallet and app adoption still required
The grant does not make the protection available across wallets automatically. The Foundation said wallet extensions would need to integrate the library, while application teams would need to enroll their domains and serve a signed manifest with each release.
That distinction matters: the announcement funds development and adoption work, rather than claiming that all Ethereum interfaces are now protected by the mechanism.
Relationship to clear signing
The Foundation said the proposed integration would complement its Clear Signing work. Clear signing is intended to help people understand what they are approving, while the WEBCAT-related work is aimed at validating the integrity of an enrolled application’s front end.
The announcement identifies front-end manipulation and supply-chain risks as the problem area. It does not substitute for users checking transaction details or for teams maintaining secure application infrastructure.
Source: <a href="https://cryptonews.net/news/ethereum/33320216/” target=”_blank” rel=”nofollow noopener”>cryptonews.net