Ethereum Foundation Funds WEBCAT Work for Wallet and App Front-End Checks

The Ethereum Foundation’s Trillion Dollar Security initiative has announced a grant allocation to the Freedom of the Press Foundation to support work on WEBCAT, an open-source project designed to help browsers verify website code against a signed manifest.

According to the Foundation’s Aug. 5 announcement, the funding is intended to support a verification library that Ethereum wallets can integrate, along with Chromium-browser research, implementation support, an independent audit and proposed standardization work.

Focus on front-end integrity

The Foundation described a gap between encrypted website connections and verification that the code delivered by a site matches code approved by its developers. It said a compromised web interface could alter a recipient address or present users with a signature request that differs from what the interface displayed.

WEBCAT, short for web-based code assurance and transparency, is intended to let a browser compare resources delivered by an enrolled site with a signed manifest. The post says its current alpha Firefox extension blocks a page and warns the user if verification fails.

Wallet and app adoption still required

The grant does not make the protection available across wallets automatically. The Foundation said wallet extensions would need to integrate the library, while application teams would need to enroll their domains and serve a signed manifest with each release.

That distinction matters: the announcement funds development and adoption work, rather than claiming that all Ethereum interfaces are now protected by the mechanism.

Relationship to clear signing

The Foundation said the proposed integration would complement its Clear Signing work. Clear signing is intended to help people understand what they are approving, while the WEBCAT-related work is aimed at validating the integrity of an enrolled application’s front end.

The announcement identifies front-end manipulation and supply-chain risks as the problem area. It does not substitute for users checking transaction details or for teams maintaining secure application infrastructure.