BTC $83,817.07 -2.02%
ETH $2,612.81 -3.32%
BNB $766.12 -1.91%
XRP $1.46 -2.43%
SOL $118.30 -1.59%
TRX $0.3320 -1.06%
DOGE $0.0900 -4.78%
ADA $0.2530 -5.11%
BCH $306.11 -2.94%
LINK $13.54 -1.66%
HYPE $90.86 -3.29%
AAVE $174.36 -4.52%
SUI $1.12 -4.91%
XLM $0.2059 -3.90%
ZEC $1,324.29 -1.33%
AAPL $334.27 +0.39%
AMZN $256.79 +1.90%
GOOGL $347.36 +0.11%
MSFT $530.29 +0.86%
META $740.10 -0.45%
NVDA $240.19 +0.34%
TSLA $378.31 -0.32%
SNDK $1,645.99 -2.73%
INTC $112.29 -3.11%
SPCX $168.42 -1.96%
MU $1,044.16 -1.28%
AMD $650.39 +2.99%
BTC $83,817.07 -2.02%
ETH $2,612.81 -3.32%
BNB $766.12 -1.91%
XRP $1.46 -2.43%
SOL $118.30 -1.59%
TRX $0.3320 -1.06%
DOGE $0.0900 -4.78%
ADA $0.2530 -5.11%
BCH $306.11 -2.94%
LINK $13.54 -1.66%
HYPE $90.86 -3.29%
AAVE $174.36 -4.52%
SUI $1.12 -4.91%
XLM $0.2059 -3.90%
ZEC $1,324.29 -1.33%
AAPL $334.27 +0.39%
AMZN $256.79 +1.90%
GOOGL $347.36 +0.11%
MSFT $530.29 +0.86%
META $740.10 -0.45%
NVDA $240.19 +0.34%
TSLA $378.31 -0.32%
SNDK $1,645.99 -2.73%
INTC $112.29 -3.11%
SPCX $168.42 -1.96%
MU $1,044.16 -1.28%
AMD $650.39 +2.99%

Safe 回应盲签名安全事件,建议多设备签名

2024-10-18 23:41:06

ChainCatcher 消息,Safe 团队对 Radiant Capital 的事后报告中提到的安全事件进行了审查,指出 Safe {Wallet} 前端功能正常,但外部设备在签名流程中被破坏,导致黑客能够替换交易数据并诱使签名者签署恶意交易。

Safe 团队认为这一事件突显了盲签名的风险,即用户在完全查看交易细节的情况下批准交易,尤其是在使用硬件钱包时。为了解决这个问题,Safe 建议使用不同供应商的多个签名设备(例如,Ledger 和 Trezor 的组合),并通过可信接口连接这些设备,以提高交易的可见性和安全性。

此外,Safe 还探索了条件签名等技术,以提供更多上下文信息而不牺牲安全性。Safe 团队正在考虑在其界面中直接计算 Ledger 哈希,以便用户可以核对硬件钱包和界面上显示的哈希。Safe 团队强调,生态系统中各方需要合作解决盲签名问题题,并承诺与硬件钱包提供商和社区合作,以改进交易和消息签名流程。

app_icon
ChainCatcher 与创新者共建Web3世界