Content
@
0 reply
0 recast
0 reaction
sudo rm -rf --no-preserve-root /
@pcaversaccio
A lot of positive things have been said about EIP-3074. I don't wanna be the party pooper, but let me simply add the warning that it also adds the ability to drain all your assets with just one fucking signature.
1 reply
3 recasts
13 reactions
Nico
@nicom
Well if you can sign, you can also do anything else because you have the key. But I agree that the psychological friction is better when you are asked to make a tx. I have found myself very often thinking "it's just a signature on this dapp, let's not check too much, I have all on hardware wallets anyway, can't arm..."
2 replies
0 recast
1 reaction
Nico
@nicom
We have to change our way to think how important a signature is. This requires a lot of education. It will generate generate more strategies on MetaMask to help people realise the risks. It will also generate funds loss and drama.
0 reply
0 recast
1 reaction
sudo rm -rf --no-preserve-root /
@pcaversaccio
Well, currently you can only be drained for one token in one go. Now you can get drained for all tokens in one go: send batch approvals and batch transferFrom's in one go. There is a difference here.
1 reply
0 recast
3 reactions
