yeerya 提议用 TapeOut 安全电路约束签名yeerya Proposes TapeOut Safety Circuits to Constrain Signatures
针对一起仍在调查中的硬件钱包被篡改事件，yeerya 指出硬件钱包只能保护私钥、无法约束私钥能做什么，并提出把资产放进智能账户、硬件钱包只负责提出交易，每笔交易必须经过一个公开、不可篡改的 TapeOut 安全 Circuit：新地址大额转账强制等待，超过每日限额必须第二钱包确认，无限授权或危险合约调用直接拒绝，延迟期间 Guardian 可以撤销。Responding to an ongoing investigation into a tampered hardware wallet, yeerya noted that hardware wallets only protect the private key, not what the key can do, and proposed holding assets in a smart account where the hardware wallet merely proposes transactions. Every transaction must pass a public, immutable TapeOut safety circuit: large transfers to new addresses are forced to wait, amounts above a daily limit require a second wallet's confirmation, and unlimited approvals or dangerous contract calls are rejected outright, with a Guardian able to cancel during the delay.
