Implement EIP-7730 today

Summary: Trail of Bits attributes the $1.5 billion Bybit hack to a compromised supply chain and a failure to verify signatures on a separate device, and notes that the signed transaction changed an operation type from 0 (normal call) to 1 (delegate call) along with the destination address. The post argues that EIP-712 still left the data too complex for human verification, and that EIP-7730 would let hardware wallets decode transactions into readable descriptions through a JSON manifest submitted to a registry.
Key Takeaway: The Bybit signers were working with EIP-712 structured data and still could not catch a single parameter change from 0 to 1 that handed the attacker code execution inside the Safe contract. Fewer than 200 of the hundreds of DeFi applications have dedicated Ledger apps, so most users signing today have no on-device way to see what they are approving.

Read the original at Trail of Bits Blog ↗