Ethereum's Trillion Dollar Security Initiative Supports Browser Code Verification Tool WEBCAT
The Ethereum Foundation's Trillion Dollar Security (1TS) initiative has announced a grant allocation to the Freedom of the Press Foundation (FPF) to support the development of WEBCAT, an open source tool that verifies browser code.
WEBCAT lets browsers check if the code served by a website matches what its developers published. This is crucial because HTTPS authenticates the site but doesn't prove that the code has not been altered. Without verification, a compromised server can send tampered code to the user's wallet or app, exposing them to supply-chain attacks and UI manipulation.
The grant targets the front-end verification gap in web application security. The funds will go towards developing a WEBCAT verification library that wallets can integrate, enabling users to verify enrolled sites without installing a separate extension.