Advanced
Aman Dhesi@aman
1/26/2023

It's a common misconception that just simulating transactions will keep you safe from losing your crypto! Simulation only works for transactions, not for signatures. Most attacks these days are happening through Seaport signatures and it will only get worse with Uniswap permit2.

In reply to @aman
Jonny Mack@nonlinear
1/26/2023

advice for how to stay safe? (besides using stelo)

In reply to @aman
Shashank@0xshash
1/26/2023

tablestakes for wallets to explain whatever you’re doing (transactions/ signature) and flag suspicious patterns

In reply to @aman
𝙗𝙞𝙖𝙨 •○°@bias
1/26/2023

If it’s seaport that’s a main cause, then the solution is to abandon ship on OpenSea once in for all.

In reply to @aman
arta@arta
1/26/2023

I think wallets should definitely be keeping tabs on signatures and displaying active ones to users to mitigate this

In reply to @aman
dimalaba.eth@dmlb
1/26/2023

Signatures should have explicit domain field as in siwe Then wallets can show warning if there’s mismatch