Beyond offline storage

[YellowSwap]

Beyond offline storage there is a crucial step in securing users funds that many people don't know and this feature is called Clear Signing

Clear Signing

Clear Signing is a security feature that translates complex and unreadable Blockchain transactions data called hexadecimal hashes that's very common with many crypto wallets today into readable text for humans.

This feature allows users to verify exactly what they are signing for example, " Send 1 BTC to Michelle"  to prevent "blind signing" scams where users approve malicious transactions unknowingly.

I have used a lot of crypto wallets especially the hot wallet lists and they all have this weak standard transactions that shows long strings of characters on wallet, which therefore hides the true action and intent of the transaction which is why it's named blind signing.



Why is this Clear Signing important?


* As you can see, this prevents scams, it stops users from accidentally approving malicious contract calls that can drain users funds.

* This also makes interactions with Dapps to be more safer and transparent.

If you have a crypto wallet that has this feature available I suggest you enable Clear Signing and always make sure you check your device screen carefully before signing any transactions.

As a proud owner of a Keystone 3 pro, this feature is available, do your wallet supports Clear Signing? If yes let's make a list, drop the name of your wallet here, will be useful for readers I believe.

[Dariusbarandeh]

Clear signing is definitely underrated, especially now that blind signing is one of the main attack vectors for wallet drainers. Translating raw calldata into human-readable intent makes a huge difference for transaction verification, particularly with smart contracts and dApps. It’s not a silver bullet, but combined with hardware wallets and good UX, it significantly raises the security baseline for users.

[Upgrade00]

Most Bitcoin users will not relate to this as transactions on the network are mostly straightforward, you enter an address you want to send to, pick a feerate and then sign the transaction. Clear signing is useful when you are interacting with other features of the crypto world like dApps and smart contracts which involves third parties that could be trying to scam you.

Ledger is the one wallet I know which added clear signing to their system.

[SeriouslyGiveaway]

I have used a lot of crypto wallets especially the hot wallet lists and they all have this weak standard transactions that shows long strings of characters on wallet, which therefore hides the true action and intent of the transaction which is why it's named blind signing.

I don't know about Clear Signing!

About "long strings of characters" on wallet (or in my opinion, an address), I know that a multisig wallet's address is longer (has more characters) than a single signature wallet address. I am unsure that it's what you mean or you mean something else, please clarify.

Address length.
https://learnmeabitcoin.com/technical/keys/address/

[saphire24]

Most Bitcoin users will not relate to this as transactions on the network are mostly straightforward, you enter an address you want to send to, pick a feerate and then sign the transaction. Clear signing is useful when you are interacting with other features of the crypto world like dApps and smart contracts which involves third parties that could be trying to scam you.

Ledger is the one wallet I know which added clear signing to their system.

The article you linked explains why Bitcoin addresses look like long strings, not transaction calldata.
What Clear Signing refers to is hex-encoded calldata / contract calls, not address length.

Hole IO

Multisig addresses may involve more complex scripts, but users are still signing a transparent BTC transfer. Blind signing becomes a real issue mainly when interacting with smart contracts and dApps.

[X-ray]

For your information, bybit hack was caused by hacker forging malicious payload to sign and UI manipulation. The billions couldn't have been hacked if they are using clear signing to review the transaction.

Any wallet really need to implement this to prevent people losing money.

[viljy]

I didn't know about this possibility. According to the description, this function seems very useful to me, but so far I have not seen such functionality in any of the wallet applications. As I understand it, is this only available in hardware wallets?

[cr1776]

The UI is the weakest point in many systems - look at the old MSDOS vs macOS or (now) Windows.  Ditto here, the UI should help prevent problems but often it is the cause of them, or at least hides the problem so that by the time one realizes there was an issue it is too late.