Ethereum Foundation 1TS Program Funds WEBCAT to Address Verification Gap Between Ethereum Wallets and Application Frontends

BlockBeats News, August 5th: The Ethereum Foundation's "Trillion Dollar Security" initiative announced funding for the Freedom of the Press Foundation to support the continued development of its open-source tool, WEBCAT. WEBCAT enables browsers to verify whether the code provided by registered websites matches the version released by developers. For Ethereum users, when visiting application websites, browsers load and execute website code. If the code is tampered with, wallets could be manipulated to replace recipient addresses or trick users into signing unintended transactions. Simply connecting to the site does not allow users to determine whether the page has been altered. The TDS program has identified frontend attacks as an infrastructure risk and has prioritized verifiable frontends as the next step. The Freedom of the Press Foundation is developing WEBCAT partly because its SecureDrop anonymous whistleblowing system will require verifiable browser code in the future. The integrity risks of this code are identical to the browser frontend risks faced by Ethereum users. This funding will be used to develop a WEBCAT verification library that can be integrated into wallets, allowing users to gain protection without installing standalone extensions. Additionally, the funding will support research into compatibility with Chrome and Chromium browsers, team integration assistance, independent security audits, and the drafting of an ERC standard to provide wallet developers with a guideline to follow. [Original Link]