NEXT has shipped v5.9.2 of the NeoLine Chrome extension wallet, adding signing-transparency features that show users key details of a transaction before it is confirmed. Changes impacting the Neo X-side of the user experience include:
- Permit request details, including spender address, approved amount, and expiry date, are now displayed before the user confirms.
- Estimated balance changes are shown before a transaction is signed.
- Clear flags appear when a transaction involves unlimited approval or revocation.
The update addresses a problem known as blind signing, in which a wallet asks a user to authorize a transaction without showing what is being approved. On EVM-compatible chains like Neo X, blind signing is a particular concern when permit requests are involved.
A permit request is a type of off-chain token approval used on EVM networks. Rather than requiring a separate on-chain transaction to grant a third party access to tokens, the permission lets that party spend a user’s tokens up to a specified amount, valid until a set expiry date. Because the authorization is signed off-chain, the details of what is being approved are easy to overlook if the wallet does not surface them clearly.
Prior to v5.9.2, NeoLine did not display those details at the time of signing.
The full announcement can be found at the link below:
https://x.com/NEOLine20/status/2084212159651963291
