Ethereum Foundation

3 months agoNews Editor

Ethereum Foundation backs WEBCAT to address front-end code risks in wallets and dApps

The Ethereum Foundation’s Trillion Dollar Security (1TS) initiative said it is providing a dedicated grant to the Freedom of the Press Foundation to support continued development of WEBCAT, an open-source tool designed to verify whether code loaded by a website matches the version publicly released by its developers. The funding is intended to expand WEBCAT into Ethereum wallet and decentralized application use cases, where front-end integrity has remained a persistent security gap. According to the foundation, HTTPS can confirm the site a user connects to and encrypt communications, but it cannot prove that the front-end code actually running on the site is the same code published by the developer. The foundation said compromised front ends can let attackers alter recipient addresses or trick users into signing transactions that differ from what the page displays. It also described front-end attacks as a significant infrastructure risk and said WEBCAT will complement Clear Signing under the 1TS program.

2330

Zerion

4 months agoNews Editor 01

Zerion Web App Taken Offline After Front-End Alert, With Funds Reportedly Unaffected

Zerion pulled app.zerion.io offline after detecting abnormal activity. The team said the issue was limited to the front end, not the blockchain or users’ private keys. Mobile apps and the browser extension remain available, and no fund losses have been reported so far.

2010

Pons

4 months agoNews Editor

Pons says front-end was not affected, old Debank bridge tied to about $0.66 in losses

Pons, the launch platform on Robinhood Chain, said a potential token approval issue did not affect its Launchpad front end because the interface does not include the Multicall3 function in question. In a post on X, the team said the function existed only in the old Debank cross-chain bridge, a feature that predates the launch of Pons Launchpad. According to the statement, only 0.6 NOXA tokens have been affected so far, with an estimated value of about $0.66. As a precaution, users who previously used the old bridge were advised to revoke token approvals. Pons also said it is working with its auditor to investigate the issue and plans to restore front-end service as soon as possible.

2490

Bit.Fan