The Ethereum Foundation has allocated a grant to the Freedom of the Press Foundation to develop WEBCAT, an open-source security tool aimed at protecting crypto users from malicious website code. Announced on August 5, 2026, the initiative is part of the foundation’s Trillion Dollar Security program and addresses a critical vulnerability in browser-based crypto applications.
WEBCAT will enable Ethereum wallets and decentralized applications to verify that the front-end code matches a developer-signed manifest before users approve transactions. This approach counters attacks where HTTPS encryption fails to prevent injected malicious code that can alter transaction details, replace recipient addresses, or manipulate signing requests without user awareness. If verification fails, the tool blocks the page and issues a warning.
Beyond the core verification technology, the grant covers implementation support for developers, compatibility research for Chromium-based browsers, an independent security review, and the creation of a new Ethereum Request for Comments standard to streamline wallet integrations. The foundation emphasized that WEBCAT complements its existing Clear Signing initiative, which focuses on transaction transparency, by adding website authenticity verification. Together, they form a layered defense against phishing and compromised decentralized applications.
