The leaks · 77 / 127 · 2 min
The frontend
The website is not the contract. Whoever can change the website can change the transaction you are about to sign.
You sign what the page built. The logo does not review it.
A worked case
A familiar app loads from a domain. The files on the domain are replaced. The next transaction sends an approval. The contract people meant to use is unchanged. They never spoke to it. They spoke to the page.
Two objects
The contract sits on a chain. The page that builds your transaction sits on a domain. The domain can be taken, or the files on it can be swapped.
The signature
You sign what the page built. A familiar logo does not review the transaction. If the page was replaced, the logo was the costume.
Uniswap is a set of contracts, and also a website
Uniswap is a protocol of contracts on Ethereum and elsewhere, and it is also a website people load to build transactions. Those are neighbours, not the same object. The website can be copied. The domain can be imitated. The contracts do not police the page that called them.
You sign the transaction the page assembled. If you did not read the spender and the amount, the logo did the reading, and the logo cannot read.
Read it yourself
These links are the record. They are not a recommendation, and they are not instructions. A news story or a court paper can still be wrong about a detail. The check does not change because a famous name is in the story.
Apply the check
Open a question. The line is about this topic. It is not a verdict that anything is safe.
Whoever the swapped page pays.
Whoever can change the domain or the files.
The signature you make on that page.
Check yourself
Write it in your own words. The course's answer opens after that. Nothing is sent.
After this you can separate the domain from the contract, and read the transaction.