The Ethereum Foundation formally launched a new open standard on May 12, 2026 designed to end "blind signing," the practice of approving cryptocurrency transactions displayed as unreadable machine code rather than plain language. The initiative, called Clear Signing, was announced by Hester Bruikman of the Ethereum Foundation and brings together seven wallet providers under a shared technical framework aimed at making transaction approvals legible to ordinary users.

The Problem It Solves

Every time a crypto user interacts with a smart contract, they are asked to approve a transaction. On most wallets today, that approval screen shows raw hexadecimal calldata, a string of numbers and letters that even experienced developers cannot reliably parse at a glance.

This gap between what users see and what they are actually authorizing has been the root mechanism behind some of the largest thefts in crypto history.

The most cited example is the February 2025 Bybit hack. North Korea's Lazarus Group compromised a developer's machine at Safe (formerly Gnosis Safe), the wallet infrastructure Bybit used for its treasury. The attackers injected malicious JavaScript into Safe's web interface so that Bybit's signing team saw a routine transaction on screen while the actual calldata routed approximately $1.4 to $1.5 billion in assets (401,347 ETH) to attacker-controlled addresses.

The entire drain took 23 minutes. NCC Group's technical post-mortem of the incident concluded that the signers lacked a reliable means of verifying that what they approved matched what the blockchain would execute.

That single incident stands as one of the largest individual crypto thefts ever recorded. Chainalysis estimates total crypto scam losses that year reached $17 billion globally. Access-control failures alone accounted for 59 percent of crypto theft in the first half of 2025, according to Stingrai.io, with phishing and interface manipulation contributing substantially to overall losses.

How the Standard Works

Clear Signing is built on ERC-7730, a specification that uses JSON-formatted "transaction descriptors" to translate contract interactions into plain language before they reach the approval screen. A compatible wallet reads the descriptor for a given contract and displays a human-readable summary, for example something like "Send 500 USDC to Uniswap v3 pool" (a hypothetical illustration of the format, not an actual system output), rather than a raw data string.

Ledger originally proposed ERC-7730 in 2024 and released version one in 2025. Version two followed in April 2026, expanding coverage to cross-chain transactions, software wallets, complex DeFi structures including ERC-4626 vaults, and confidential-token primitives such as ZK-based tokens.

On May 12, Ledger transferred governance of the descriptor registry to the Ethereum Foundation, which now hosts it at clearsigning.org. The transfer was intended to give the standard neutral, community-governed oversight rather than keeping it under a single commercial wallet provider.

A companion standard, ERC-8176, adds an attestation layer. Independent security researchers review and sign off on descriptors before they enter the registry, so wallets can verify they are consuming accurate metadata rather than taking it on faith.

Trezor CTO Tomáš Sušánka told CoinDesk: "When users can't understand what they're signing, security becomes much harder."

Trezor had already shipped transaction decoding in early Q2 2026 and committed to full human-readable signing by June 30, 2026. Other participants in the working group include MetaMask, WalletConnect, Fireblocks, Keycard, and Argot. Security firms Cyfrin, Sourcify, ZKnox, and Zama are providing verification support. The Ethereum Foundation is also funding a $1 million subsidy program for security audits of open-source projects that integrate the standard.

Why This Matters More Outside the West

The regional picture complicates the optimistic framing coming from wallet manufacturers. India ranked first globally in crypto adoption on Chainalysis's 2025 index, receiving approximately $338 billion in on-chain crypto value in the year to June 2025. Pakistan ranked third. Nigeria ranked sixth. These are markets dominated by software wallets on mobile devices, not hardware wallets like Ledger or Trezor, which retail between $79 and $279 and face real import and cost barriers across Sub-Saharan Africa and South Asia.

The near-term benefit of Clear Signing in these regions depends primarily on how quickly MetaMask and WalletConnect ship their implementations, since those are the dominant interfaces for users in Lagos, Karachi, and Mumbai.

Descriptor prompts also need to surface cleanly on low-end Android devices without adding friction that discourages adoption.

There is also a language gap the current specification does not address. ERC-7730 descriptors are written in English. For a standard meant to make transactions readable to all users, that creates an obvious limitation in markets where English literacy is uneven.

India's Enforcement Directorate uncovered 26 fraudulent crypto websites in December 2025 alone. Indian authorities linked losses exceeding approximately $275 million to Ponzi-style crypto frauds that year.

The Treasure NFT scheme, which collected roughly $800 million from victims concentrated in India and Pakistan, is a direct example of interface-layer manipulation that exploited users who could not verify what they were signing. It illustrates the broader category of vulnerability that Clear Signing is designed to close: when users cannot read what an approval screen is actually authorizing, fraudulent contracts are far easier to deploy at scale.

What Comes Next

The Ethereum Foundation describes Clear Signing as the most significant user-facing output of its Trillion Dollar Security Initiative, a broader effort launched in May 2025 with two complementary goals: enabling billions of individuals to each store more than $1,000 on-chain securely, and allowing institutions and governments to trustlessly hold over $1 trillion in a single smart contract.

Developer tooling for ERC-7730 is already available in Rust and TypeScript, along with a linter, tester, analyzer, and an LLM-powered descriptor generator.

Whether the standard closes the security gap it targets will depend on how comprehensively wallet providers deploy it, how quickly descriptor coverage extends to the long tail of DeFi contracts, and whether the ecosystem invests in making plain-language prompts genuinely accessible to users in the markets where adoption is growing fastest.