In reply to @v12sec

V12

V12

@v12sec · Twitter ·

Resolving with no arguments hands the sign request approvalRes === undefined. The signing paths read `approvalRes?.extra`, so undefined is tolerated and the keyring signs. `personal_sign` and all four `eth_signTypedData` variants take this path, v4 included. The result is a cryptographically valid signature returned to the requesting origin, produced without the user ever seeing or confirming it.

Post media