ERC-8213 Proposes Standard for Wallet Signature and Calldata Digest Display on Ethereum: When Your Wallet Finally Tells You What You're Actually Signing

ERC-8213 introduces standardized human-readable display of wallet signatures and calldata, requiring wallets to decode EIP-712 data and show risk scores before signing. The standard would dramatically improve user safety but faces weak wallet adoption incentives since wallets profit from transaction volume and adding friction reduces conversion rates.

· Updated September 7, 2026 · Zain Tran · 10 min read · 0 total views · 0 today

Categories: technology

Featured image for erc_8213_wallet_signature article

The proposal appeared on the Ethereum Magicians forum in September 2026 with the quiet frustration of developers who had watched users blindly sign transactions for years and decided that the problem was not user education—it was wallet design. ERC-8213 introduces a standardized format for displaying wallet signatures and calldata digests in human-readable form, requiring wallets to show users what they are signing before they sign it. The pitch was protective: every wallet approval should be an informed decision, not a reflexive click. The standard mandates structured parsing of EIP-712 typed data, contract function selectors, and parameter decoding so that a user signing a token approval sees "Allow Uniswap V3 Router to spend up to 1,000 USDC" instead of a hex string. The fine print raised a question about whether wallets that make money from transaction volume have any incentive to slow users down with better information.

That was the standard. Then came the question of whether requiring wallets to display decoded signatures is a user protection breakthrough or just another specification that wallets will ignore until a regulator forces them to comply.

What ERC-8213 Actually Proposes

The proposal describes a display standard that fundamentally changes the wallet signing experience:

The Signature Display Requirements:

- Wallets must decode EIP-712 typed data into human-readable structured messages

- Contract function calls must display the function name, parameters, and estimated value impact

- Token approvals must show spender address, token amount, and whether the approval is unlimited

- Multi-call transactions must enumerate each sub-transaction with individual risk assessment

- Delegation signatures (ERC-7710, ERC-7715) must display delegated permissions and duration

The Calldata Digest Standard:

- A JSON schema that maps common contract functions to human-readable templates

- Community-maintained registry of verified contract metadata (function signatures, parameter names)

- Fallback heuristics for unverified contracts showing raw selector and decoded parameters

- Risk scoring overlay that flags high-risk operations (unlimited approvals, ownership transfers, proxy upgrades)

- Localization support for 20+ languages

Implementation Levels:

- Level 1 (Minimum): Display function selector and raw parameter values

- Level 2 (Standard): Decode function name and parameter names from verified registry

- Level 3 (Enhanced): Add risk scoring, value estimation, and spender reputation data

- Level 4 (Optimal): Simulate transaction outcome and display state changes in natural language

The proposal frames these as user protection. They are also a threat to wallets whose business models depend on transaction speed over transaction understanding.

alt text

Key Metrics at a Glance

Dimension Current Wallet Display ERC-8213 Required Display Impact
Signature Clarity Hex data or generic message Structured human-readable text Dramatically improved
Token Approval Info "Approve" with hex "Allow [Spender] to spend [Amount] [Token]" Transparent
Risk Awareness None (user assumes safe) Risk score + flagged operations Protective
Multi-Call Clarity Single opaque transaction Enumerated sub-transactions Critical for DeFi
Contract Verification Optional, often missing Required for Level 2+ display Higher bar
User Friction Low (just click sign) Higher (must read and understand) Slower but safer
Phishing Resistance Very low Moderate (spender reputation) Improved
Wallet Development Cost Baseline Significant (registry, parsing, UI) Higher

The Proprietary Signature Transparency Score (STS)

I've developed a framework to evaluate whether ERC-8213 will actually improve user safety or merely create compliance overhead:

Formula: STS = (Display Clarity × 0.3) + (Wallet Adoption Incentive × 0.25) + (Phishing Resistance × 0.25) + (Implementation Cost-Benefit × 0.2)

ERC-8213 Assessment:

Factor Score Analysis
Display Clarity 8/10 The structured display is a genuine improvement over hex strings; Level 3 and 4 displays would make informed consent possible; even Level 2 is dramatically better than current practice
Wallet Adoption Incentive 3/10 Wallets compete on speed and convenience; adding mandatory decoding steps slows the user journey; wallets that implement ERC-8213 may lose users to wallets that do not; the economic incentive is against adoption
Phishing Resistance 5/10 Displaying spender reputation and risk scores helps; but sophisticated phishing uses verified contracts and social engineering; the standard makes obvious scams harder but does not eliminate social engineering
Implementation Cost-Benefit 4/10 Building and maintaining the contract registry is expensive; verifying contract metadata requires ongoing community effort; the cost falls on wallets and standards bodies; the benefit accrues to users who may not demand it
Total STS 5.05/10 The standard would dramatically improve user safety if adopted; but adoption incentives are weak; the cost-benefit for wallets is unfavorable; implementation requires sustained community investment

A score of 5.05 indicates that ERC-8213 is a valuable standard with a significant adoption gap. The technical approach is sound. The economic incentives are misaligned.

alt text

The Three Transparency Traps

Trap 1: The Compliance Theater

The standard requires wallets to display decoded information. It does not require users to read it. The wallet that shows "Allow Uniswap V3 Router to spend unlimited USDC" and still lets the user sign with a single click has complied with the standard without changing behavior. The phishing victim who was trained to click through warnings will click through decoded messages too. The standard assumes that information changes decisions. Sometimes it does. Often it does not. The wallet that implements ERC-8213 Level 1—displaying raw parameters with function names—has technically complied but practically achieved nothing. The gap between specification and effective protection is where most security standards fail.

Trap 2: The Registry Centralization

The contract metadata registry sounds like a community resource. It is a critical infrastructure point. Whoever maintains the registry controls what names are displayed for function selectors. A malicious registry entry could label a draining function as "Claim Rewards." An outdated registry could miss new attack patterns. The standard proposes decentralized governance for the registry, but governance in practice means whoever controls the governance token controls the display names. The user who trusts the wallet's display is implicitly trusting the registry's integrity. The standard does not solve the trust problem. It moves it from the wallet to the registry.

Trap 3: The Revenue Conflict

Wallet providers make money from transaction volume. Some take a cut of swaps. Some sell user data. Some monetize through token integrations. Every transaction that is slowed down by a mandatory reading step is a transaction that might be abandoned. The wallet that implements ERC-8213 Level 3 or 4—full risk scoring and simulation—creates friction that reduces conversion rates. The wallet that ignores the standard remains faster and retains more users. The standard is designed to protect users from wallets that prioritize speed over safety. But those wallets are the ones that must implement it. The conflict is structural: the standard asks the fox to install better locks on the henhouse.

Competitive Landscape: Wallet Security Standards

Standard/Approach Display Level Wallet Adoption User Protection Maturity
ERC-8213 Structured + risk scores Voluntary (proposed) High (if adopted) Proposal
EIP-712 (Typed Data) Structured but wallet-dependent Widespread Moderate Mature
WalletConnect Sign API Provider-dependent Widespread Variable Active
Safe Transaction Service Full simulation + decoding Safe-specific High Active
Fireblocks / Institutional Full decoding + policy Institutional High Mature
Rabby Wallet Risk scoring + simulation Rabby-specific High Active
Revoke.cash Post-hoc approval review Web tool Moderate Active
Blockaid / Wallet Guard External risk API Integration-dependent Moderate Active

The landscape shows that advanced signature display exists but is fragmented across specific wallets and tools. No universal standard has achieved widespread adoption.

alt text

Scenario Analysis: Three Futures for Signature Transparency

Scenario A: Regulatory Catalyst (30% probability)

  • Regulatory action (SEC, EU MiCA) mandates signature display standards
  • Major wallets (MetaMask, Rainbow, Phantom) implement ERC-8213 to comply
  • Smaller wallets follow to remain competitive
  • User phishing losses drop significantly
  • The standard becomes as universal as HTTPS

Scenario B: Niche Excellence (45% probability)

  • Security-focused wallets (Rabby, Frame) implement advanced display
  • Mainstream wallets add minimal compliance (Level 1 or 2)
  • Users who want safety switch to security-focused wallets
  • The market fragments into "fast" and "safe" wallet categories
  • ERC-8213 exists but does not transform the ecosystem

Scenario C: Regulatory Capture (25% probability)

  • Regulations mandate display standards but do not enforce them
  • Wallets implement checkbox compliance with minimal decoding
  • Users continue clicking through decoded displays without reading
  • Sophisticated phishing adapts to exploit the new displays
  • The standard creates a false sense of security without changing behavior

The Bottom Line

ERC-8213 addresses the single most important user experience failure in Ethereum: the fact that most users sign transactions they do not understand. The structured display, risk scoring, and contract metadata registry are all improvements that would save users money and reduce phishing losses.

But the three traps—compliance theater, registry centralization, and revenue conflict—are structural, not technical. The Signature Transparency Score is 5.05/10. Display clarity is excellent. Wallet adoption incentives are weak. Phishing resistance is partial. Implementation cost-benefit is unfavorable.

The question is not whether users deserve better signature displays. They do. The question is whether wallets will voluntarily implement a standard that slows transactions and reduces conversion rates. History suggests they will not. MetaMask has had the technical capability to display decoded transactions for years. It does not do so by default because the default experience is designed for speed, not understanding.

ERC-8213 may find its path through regulation. The EU's MiCA framework and potential SEC action on wallet disclosures could create mandatory adoption. But a standard that succeeds because of regulation rather than market demand is a standard that the ecosystem resisted. That resistance matters. It means the standard was not valued until it was forced.

The developers proposing ERC-8213 are not naive. They understand the incentive problem. They have designed a standard that is technically sound and user-centered. But the wallet ecosystem is not user-centered. It is volume-centered. And volume-centered ecosystems do not voluntarily add friction.

The user who signs an unlimited token approval today does so because the wallet made it easy. ERC-8213 would make it harder. That is the point. But making something harder in a competitive market requires either user demand or regulatory force. As of September 2026, neither is sufficient.

TL;DR

  • What: ERC-8213 proposes standardized human-readable display of wallet signatures and calldata, requiring wallets to decode EIP-712 data and show risk scores before signing
  • The Score: Signature Transparency Score of 5.05/10—display clarity (8/10) is excellent but wallet adoption incentives (3/10) are weak, phishing resistance (5/10) is partial, and implementation cost-benefit (4/10) is unfavorable for wallet providers
  • The Reality: Four implementation levels from basic function decoding to full transaction simulation; contract metadata registry required; but wallets profit from transaction volume and have economic incentive against adding friction
  • Three Traps: Compliance theater (decoded displays that users still click through); registry centralization (whoever controls function name registry controls what users see); revenue conflict (wallets make money from speed, standard requires slowness)
  • Outlook: Regulatory catalyst (30%) with mandatory adoption; niche excellence (45%) where security-focused wallets lead; regulatory capture (25%) with checkbox compliance and unchanged user behavior

Sources


Zain Tran is TotesTek's Ethereum Ecosystem Columnist & Accountability Reporter. He writes about Ethereum, ETH, smart contracts, DeFi, Layer 2 networks, staking, validators, and the real-world consequences of technical and financial failure.