human.tech @human.tech · Apr 1 1 / 2
-> the second: keep it local. tools like Open Wallet Standard read the key into memory using a seed phrase, sign, then wipe it. sandboxed process, never exposed raw better. but not good enough 3/13
0 likes 1 replies
?
Replies
the problem with local: there’s one moment to sign. if calldata changes, a contract updates, or price moves in that window, you sign something you didn’t intend you can't update policies dynamically. you can't loop in oracle feeds. you can't respond to live onchain state x.com/NanakNihal/... 4/13