Hi @madgas! Thanks for your feedback.
“Blind signing” is a huge problem that plagues most if not all crypto wallets. Not so long ago, we added support for parsing calldata of known contracts, which somewhat alleviated the security issues for a limited set of use-cases. You can read more about it here: https://brave.com/safer-signing
Good news is that we finally have a comprehensive solution for the issue of blind-signing, and are close to landing Transaction Previews on desktop, which will subsequently make it to iOS and Android. This will come with two main features:
- provide clear and user-friendly state transactions, including but not limited to balance changes.
- flag transactions that either originate from known phishing domains or attempt to perform malicious transactions.
You can track our progress on GitHub using the label feature/web3/wallet/simulation.