Skip to content
FORENSIAWeb3 forensicsOpen workspace
FORENSIAOpen workspace
Menu
Make yourself at home
← The field guide
Permissions / Illustrated lesson

Signature phishing
A message can become permission later.

Some token standards accept signed approval messages. A signature can be collected off-chain and submitted later by someone else. Understanding the signed domain and fields is essential.

Reading history stays in this browser. Manage it in My Explore.
  1. 01

    A message is presented

  2. 02

    The account signs it

  3. 03

    Another transaction submits it

Illustrative sequence. This diagram is a teaching aid, not a captured transaction.

What to collect

  1. Signed domain, chain and contract
  2. Spender, value, nonce and deadline
  3. Transaction that consumed the signature
Before drawing a conclusion

The chain may show the use of a signature without showing the website or explanation the signer saw.

Test the idea

No transaction appeared when a user signed. Does that mean the signature has no consequences?

Reveal the explanation

No. Some signatures authorize later actions. The message type and the contract that accepts it determine its effect.

Try a practice scenario ↗
FORENSIA

Web3 forensics that shows its sources. Read-only, public evidence, and a clear line where the proof ends.

Contact us

Leave your name and email and the Forensia team will write back.

How we handle your emailOr email us directly

By selecting Contact me you agree that Forensia may email you at this address about your enquiry. You can withdraw anytime. Name, email and consent are kept for up to 90 days, separately from investigations. No searched address is included in this submission.