Announcing a Trillion Dollar Security grant for WEBCAT

The Ethereum Foundation’s Trillion Dollar Security (1TS) initiative has announced a significant grant allocation to the Freedom of the Press Foundation (FPF) to support the ongoing development and expansion of WEBCAT. An open-source tool designed to protect users from modern web-based tampering, WEBCAT allows web browsers to independently verify that the code served by an enrolled website exactly matches what its developers originally published. Alongside its existing capabilities, this new grant will help extend that vital layer of cryptographic protection directly into Ethereum wallets and decentralized applications, addressing a persistent security vulnerability across the broader web and crypto ecosystems.

Closing the Front-End Verification Gap

The newly announced grant targets a critical structural gap in how web applications are secured across the internet today. While the widespread adoption of HTTPS successfully authenticates the specific site a user connects to and encrypts the connection in transit, it fundamentally fails to prove that the actual code served by that site matches what its developers intended to publish. Without an independent integrity check operating at the browser level, a user’s browser can easily run an altered front end without throwing any warnings or alerting the user to potential danger.

For everyday Ethereum users, this unique risk lies directly within the application’s website interface itself. When a user visits a decentralized application, their browser automatically loads and executes the site’s underlying code. If that front-end code has been maliciously tampered with, attackers can silently swap recipient addresses during a transaction or trick the user into cryptographically signing something entirely different from what is visually displayed on the page. Because the vulnerability exists within the application presentation layer, a user’s cryptocurrency wallet cannot determine from the network connection alone whether the web page has been altered.

Recognizing these systemic dangers, the Trillion Dollar Security initiative has identified front-end hacks as a major infrastructure risk, classifying verifiable front ends as an essential next step for user protection. Compromised web interfaces routinely expose unsuspecting users to sophisticated supply-chain attacks and user interface manipulation, while also drastically increasing the real-world impact of severe infrastructure incidents such as DNS hijacks.

About WEBCAT

WEBCAT, which stands for web-based code assurance and transparency, is engineered to solve these exact integrity challenges by letting a browser verify that the specific resources served by an enrolled site match a cryptographically signed manifest. If this verification process fails, the current alpha-stage Firefox extension actively prevents the compromised web page from loading entirely and displays a prominent warning to the user.

Under this architecture, developers sign a detailed manifest describing the individual files and other digital assets covered by each specific software release. A distributed, verifiable enrollment system then maintains a public record of these manifests. For every participating site, that permanent record holds a cryptographic fingerprint of enrollment information that clearly specifies the site’s authorized signing identities and strict validation rules. The browser extension periodically downloads and verifies a localized snapshot of this record, allowing it to verify enrolled sites locally without needing to contact a third-party server on every single page visit.

The Freedom of the Press Foundation developed WEBCAT in large part because future iterations of SecureDrop will require highly verifiable browser code. SecureDrop is FPF’s widely trusted, open-source submission system designed to facilitate secure, anonymous communication between investigative journalists and confidential sources.

Currently, SecureDrop encrypts sensitive submissions directly on the newsroom’s server as they are uploaded. While the server handles unencrypted content briefly during the upload phase, it ultimately stores all submissions in a heavily encrypted format. To elevate privacy standards even further, FPF is actively developing a robust end-to-end encryption protocol for a future version of SecureDrop. Under this intended design paradigm, a source’s browser would encrypt message content locally before transmitting it over the network, ensuring the server only ever stores ciphertext rather than holding vulnerable plaintext in memory until server-side encryption takes place. This advanced protocol remains under active development and does not yet cover file attachments.

Because the underlying encryption code would still originate from the server itself, a compromised server could theoretically send altered code capable of capturing sensitive content before encryption occurs. WEBCAT is specifically intended to detect and block that kind of malicious front-end alteration. Furthermore, FPF has successfully tested WEBCAT with various other browser-based secure applications through targeted proof-of-concept integrations.

The exact same code-integrity risks that threaten investigative journalism apply directly when Ethereum users interact with browser-based application front ends. This shared vulnerability is precisely why a security tool originally built to protect sensitive sources and journalists is a natural fit for crypto wallets and decentralized applications.

What the Grant Funds

The new grant directly funds the engineering and development of a dedicated WEBCAT verification library that external wallets can seamlessly integrate into their own architectures.

A wallet that incorporates this library gains the native ability to verify enrolled sites directly, ensuring that users receive robust protection without needing to install a separate browser extension. Additionally, the funding supports vital technical research into supporting Google Chrome and other Chromium-based browsers, provides direct assistance to development teams working to add WEBCAT to their applications, covers an independent professional security audit, and helps establish an official Ethereum Request for Comments (ERC) standard so that all wallet developers have a consistent, standardized protocol to follow.

This new verification library will directly complement other ongoing 1TS security initiatives, including Clear Signing. While Clear Signing helps users clearly understand what transactions they are approving on-chain, WEBCAT integration will help wallets verify that an enrolled application’s front end genuinely matches its authenticated, signed manifest.

What’s Next for Wallet and App Teams

Bringing this advanced level of front-end verification into everyday wallets requires coordinated adoption on both sides of the ecosystem. Wallet extensions must integrate the verification library, while application development teams must formally enroll their domains and consistently serve a signed manifest alongside every software release.

Teams and developers interested in front-end integrity and participating in these security standards are encouraged to reach out to the initiative at [email protected]. Further information regarding ongoing risk controls and priority security work can be found directly at trilliondollarsecurity.org.