<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>Presign incidents and changelog</title><description>Presign reads every request your wallet is about to sign and explains it in plain words before you confirm.</description><link>https://presign-theme.pages.dev</link><language>en</language><item><title>Anatomy of a permit drainer</title><link>https://presign-theme.pages.dev/incidents/anatomy-of-a-permit-drainer</link><guid isPermaLink="true">https://presign-theme.pages.dev/incidents/anatomy-of-a-permit-drainer</guid><description>412 wallets signed a gasless permit in six hours. None of them sent a transaction, and all of them lost their USDC.</description><pubDate>Wed, 28 Oct 2026 12:00:00 GMT</pubDate><category>Incidents</category><category>Drainers</category></item><item><title>v2.3: Permit2, read in full</title><link>https://presign-theme.pages.dev/changelog#v2-3</link><guid isPermaLink="true">https://presign-theme.pages.dev/changelog#v2-3</guid><description>Permit2 batch signatures are decoded line by line, with the deadline and every token they unlock. Permit2 batch decoding. Safe multisig: check all owners at once. Faster popup on Firefox.</description><pubDate>Wed, 14 Oct 2026 12:00:00 GMT</pubDate><category>Changelog</category></item><item><title>The airdrop that asked for everything</title><link>https://presign-theme.pages.dev/incidents/airdrop-that-asked-for-everything</link><guid isPermaLink="true">https://presign-theme.pages.dev/incidents/airdrop-that-asked-for-everything</guid><description>A claim page that needed one signature: setApprovalForAll on every NFT you own.</description><pubDate>Wed, 09 Sep 2026 12:00:00 GMT</pubDate><category>Incidents</category><category>Airdrops</category></item><item><title>v2.2: One-tap allowance fix</title><link>https://presign-theme.pages.dev/changelog#v2-2</link><guid isPermaLink="true">https://presign-theme.pages.dev/changelog#v2-2</guid><description>When an approval asks for too much, the fix sets it to the amount of the trade. One tap, then sign. Fix suggestions for approve and permit. Lookalike address flag in history.</description><pubDate>Wed, 19 Aug 2026 12:00:00 GMT</pubDate><category>Changelog</category></item><item><title>Fake revoke sites, explained</title><link>https://presign-theme.pages.dev/incidents/fake-revoke-sites</link><guid isPermaLink="true">https://presign-theme.pages.dev/incidents/fake-revoke-sites</guid><description>People who tried to clean up their approvals signed new ones instead.</description><pubDate>Tue, 21 Jul 2026 12:00:00 GMT</pubDate><category>Incidents</category><category>Phishing</category></item><item><title>v2.1: Solana, in beta</title><link>https://presign-theme.pages.dev/changelog#v2-1</link><guid isPermaLink="true">https://presign-theme.pages.dev/changelog#v2-1</guid><description>Solana transactions get decoding and simulation. Flags follow in v2.4. Solana beta. Phantom and Backpack support.</description><pubDate>Thu, 02 Jul 2026 12:00:00 GMT</pubDate><category>Changelog</category></item><item><title>v2.0: A new simulation engine</title><link>https://presign-theme.pages.dev/changelog#v2-0</link><guid isPermaLink="true">https://presign-theme.pages.dev/changelog#v2-0</guid><description>Rebuilt to fork the chain in under a second. Audited by Northgate before release. Simulation p50 620 ms. Northgate audit published. API v2.</description><pubDate>Wed, 10 Jun 2026 12:00:00 GMT</pubDate><category>Changelog</category></item><item><title>Address poisoning: the lookalike in your history</title><link>https://presign-theme.pages.dev/incidents/address-poisoning</link><guid isPermaLink="true">https://presign-theme.pages.dev/incidents/address-poisoning</guid><description>A zero-value transfer plants an address that matches the first and last four characters.</description><pubDate>Wed, 03 Jun 2026 12:00:00 GMT</pubDate><category>Incidents</category><category>Addresses</category></item><item><title>When the frontend was the exploit</title><link>https://presign-theme.pages.dev/incidents/frontend-was-the-exploit</link><guid isPermaLink="true">https://presign-theme.pages.dev/incidents/frontend-was-the-exploit</guid><description>The contracts were fine. The DNS was not, for 47 minutes.</description><pubDate>Sat, 18 Apr 2026 12:00:00 GMT</pubDate><category>Incidents</category><category>Frontends</category></item><item><title>v1.4: The API goes public</title><link>https://presign-theme.pages.dev/changelog#v1-4</link><guid isPermaLink="true">https://presign-theme.pages.dev/changelog#v1-4</guid><description>Wallets and exchanges can run the same checks on their side, priced per check. POST /v2/check. Webhooks for flagged requests.</description><pubDate>Tue, 24 Feb 2026 12:00:00 GMT</pubDate><category>Changelog</category></item><item><title>v1.0: Public launch</title><link>https://presign-theme.pages.dev/changelog#v1-0</link><guid isPermaLink="true">https://presign-theme.pages.dev/changelog#v1-0</guid><description>Presign opens to everyone after the Halcyon audit. Chrome, Firefox and Brave. Halcyon audit published.</description><pubDate>Tue, 30 Sep 2025 12:00:00 GMT</pubDate><category>Changelog</category></item><item><title>v0.9: Private beta</title><link>https://presign-theme.pages.dev/changelog#v0-9</link><guid isPermaLink="true">https://presign-theme.pages.dev/changelog#v0-9</guid><description>312 testers, one wallet each, a lot of feedback. First rule set: 41 rules.</description><pubDate>Mon, 12 May 2025 12:00:00 GMT</pubDate><category>Changelog</category></item></channel></rss>