How native transaction assertions could enforce a transaction's final outcome

What happened

The Ethereum Foundation's Trillion Dollar Security initiative has identified blind signing and transaction uncertainty as a user experience risk, and is exploring native transaction assertions as a next step to enforce a transaction’s final outcome, alongside Clear Signing. Two ways a signed transaction can go wrong The problem starts with how Ethereum works.

Bybit’s signers authorized replacing the Safe’s implementation contract, while Badger users granted the attacker permission to spend their tokens. It executes exactly what you authorize, without judging whether the result is what you wanted.

A signature commits to a request, but its outcome depends on the code and state it encounters during execution. Users have lost large sums either because they approved something different from what they believed they were approving, or because the request they intended still produced a result they didn’t want.

The first case is an intent mismatch, as seen in the Bybit incident and the BadgerDAO attack . In both attacks, a compromised frontend supplied a signing request that differed from what users believed they were approving.

The other case is an outcome mismatch. In the Aave and CoW collateral swap , a user asked to swap about $50.4 million of aEthUSDT for aEthAAVE .