Duffy
@duffy
What’s stopping someone making a wallet drainer in a frame @dwr.eth @v? Can I get my wallet drained just by miss-clicking a frame?
1 reply
0 recast
0 reaction
Que
@que
Interacting with a frame doesn't involve transaction with your wallet nor signatures nor authorizations. In case of a mint done via Zora neither there the risks because it is minted via their own contract. 😜
1 reply
0 recast
0 reaction
Duffy
@duffy
I thought the value prop of frames was you can make on-chain transactions directly from within the frame? Is this wrong?
1 reply
0 recast
0 reaction
Jean Carlos Ayala (🟡,🟡)
@jeanayala
you can do onchain actions if the frame has onchain actions, but without access to your wallet assets. im creating a frame that creates a wallet, then you can do onchain actions with that wallet and only uses your main wallet to validate signatures to operate with the embedded wallet
2 replies
0 recast
0 reaction
Duffy
@duffy
So that is my question - how can a user know if a frame has onchain actions?
1 reply
0 recast
0 reaction
Jean Carlos Ayala (🟡,🟡)
@jeanayala
you can’t because the logic is in the server but regardless of having onchain actions or not it never have access to your wallet
1 reply
0 recast
0 reaction
Duffy
@duffy
If you can mint an NFT via a frame, you can sign a transaction that drains your wallet…
0 reply
0 recast
0 reaction
