
Nothing on the screen said transfer, which is exactly why the signature was so dangerous. A friend was asked to sign a gasless message for a whitelist and saw only a wall of hex He pasted the raw data into a security channel first. Two members decoded it in minutes: a permit letting a stranger move his whole token balance Any signature you cannot read gets read by someone else. That is my #Web3 #HorrorStory for the #SocialMining season at @TheDAOLabs, so keep it in your bookmarks and add yours below
