ethresear.chpaperSecure Transaction Verification and Authorization (STVA)
Secure Transaction Verification and Authorization (STVA) is a draft Standards Track ERC (created October 2026) by @MATOBOYCRYPTO65. It proposes structured human-readable metadata and semantic intent for transactions and UserOperations, an independent simulation and verification interface, and scoped, revocable capability tokens for privileged operations. It targets blind signing and frontend supply-chain attacks, citing the February 2025 Bybit Safe multisig theft. The page gives only the abstract, motivation and core concepts.
TL;DR Proposes an ERC for independently simulated, human-readable, scoped signing payloads to counter blind signing and compromised multisig frontends.
Organisations named here
- EIP-4337
- EIP-712
- ERC-1271
- ERC-7683
- STVA
Technologies named here
- Safe multisig
- Independent Simulator
- Verification Payload
- Scoped Capability
- EIP-712, ERC-1271, EIP-4337, EIP-7702, ERC-7683
- Ethereum
- Safe
- Bybit
- EIP-7702
Techniques named here
- Blind or semi-blind signing of opaque calldata
- Multisig UI attacks and UI spoofing
- Overly broad and long-lived approvals
- Semantic intent
- Blind signing
Related in Blockchain
blog.thorchain.orgwriteupTHORChain Exploit Report #2 — GG20 root-cause disclosure
protos.comarticleBlack Thursday revisited: MakerDAO keeper exploited for $500K
.jpg)
aikido.devwriteupGraphalgo campaign spreads to Terraform providers and Go Modules
sundaytimes.lkarticle