DeFirewall: Putting an End to “Blind Signing”
summary
A live Chrome extension demo shows a wallet-approved transaction that looks identical in MetaMask but is actually a malicious payload injected on the front end; the system simulates raw transaction and call stack execution, follows internal and delegate calls, checks blacklist/whitelists, and runs automated policies to detect state changes. The tool concretely flags transactions that drain funds before signing and offers an early-adopter program for integration.
AI-written summary · about
related talks
46mWhat Can Traditional Web App Security Learn From Browser Wallet Extensions?
53mProtecting Crypto Exchanges From A New Wave Of MitB Attacks
43mCybersecurity and Global Collaboration for Securing the Web 3.0 Ecosystem
35mNow you can trust the browser
43mOutsmarting Smart Contracts
43mBypassing Malware Detection Mechanisms in Online Banking
31mBuilding your first malicious chrome extension 😈
40mModern Single Sign-On: On the Security of Single Sign-On ...