Ethereum Foundation funds Freedom of the Press to develop WEBCAT, a tool to combat front-end attacks

Ethereum Foundation funds Freedom of the Press to develop WEBCAT, a tool to combat front-end attacks

The grant supports in-browser code verification designed to protect Ethereum wallets and dApps from frontend tampering.

The Ethereum Foundation has awarded funding through its Trillion Dollar Security (1TS) initiative to the Freedom of the Press Foundation to expand development of WEBCAT, an open-source front-end verification tool designed to protect users from compromised websites.

According to a Wednesday statement, the grant will support bringing the technology directly into Ethereum wallets and decentralized applications, allowing wallets to verify that an application’s code matches a developer-signed version.

Advertisement

The foundation said the project addresses a major security weakness affecting browser-based applications. Although HTTPS secures website connections, it cannot detect whether malicious code has been injected into a site’s front end.

Such attacks can alter transaction details, replace recipient addresses, or manipulate what users are asked to sign. According to the foundation, WEBCAT prevents this by validating website code against signed release manifests and blocking pages that fail verification.

The grant also covers research into compatibility with Chromium-based browsers, assistance for developers implementing the technology, an independent security review, and development of a new Ethereum Request for Comments (ERC) standard for wallet integrations.

The foundation said WEBCAT complements its ongoing Clear Signing work by combining transaction transparency with front-end code verification.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.

Ethereum Foundation funds Freedom of the Press to develop WEBCAT, a tool to combat front-end attacks

Ethereum Foundation funds Freedom of the Press to develop WEBCAT, a tool to combat front-end attacks

The grant supports in-browser code verification designed to protect Ethereum wallets and dApps from frontend tampering.

Share

Add us on Google

The Ethereum Foundation has awarded funding through its Trillion Dollar Security (1TS) initiative to the Freedom of the Press Foundation to expand development of WEBCAT, an open-source front-end verification tool designed to protect users from compromised websites.

According to a Wednesday statement, the grant will support bringing the technology directly into Ethereum wallets and decentralized applications, allowing wallets to verify that an application’s code matches a developer-signed version.

Advertisement

The foundation said the project addresses a major security weakness affecting browser-based applications. Although HTTPS secures website connections, it cannot detect whether malicious code has been injected into a site’s front end.

Such attacks can alter transaction details, replace recipient addresses, or manipulate what users are asked to sign. According to the foundation, WEBCAT prevents this by validating website code against signed release manifests and blocking pages that fail verification.

The grant also covers research into compatibility with Chromium-based browsers, assistance for developers implementing the technology, an independent security review, and development of a new Ethereum Request for Comments (ERC) standard for wallet integrations.

The foundation said WEBCAT complements its ongoing Clear Signing work by combining transaction transparency with front-end code verification.

Disclosure: This article was edited by Editorial Team. For more information on how we create and review content, see our Editorial Policy.