when evaluating a new dapp:

what gets you to say “ok i’ll connect my wallet”?

what makes you nervous or afraid to connect your wallet?

building /presto /fc-marketplace // prev. rabbithole, village global

Genuinely curious by the attack vectors here. If you know the difference between a message signature and a transaction, aren’t you pretty much safe?

Writer. Building @pinatacloud. Tinkering with a Farcaster native alternative to GoodReads: https://readcast.xyz \ https://polluterofminds.com

co-founder stelo.com. theoretical cs phd dropout. into math, music, ml, macro, markets, surfing, writing amandhesi.net

I'd love to learn more about this. Any articles or resources you can point me to? I'm trying to wrap my head around how a signature can trigger a transaction later and I'm sure there's good material on this somewhere.

Message signatures can drain your funds too, for example through seaport bulk listings. But as long as you don’t sign anything (or only sign via the personal_sign rpc method) you’re safe