arXivDaily arXiv每日学术速递 周一至周五更新
arXiv周末暂无论文更新,休息一下吧,周末愉快~~
arXiv 2601.16751cs.HCcs.CR
收藏

我所签署的并非我所见的:迈向可解释和可信的加密货币钱包签名

"What I Sign Is Not What I See": Towards Explainable and Trustworthy Cryptocurrency Wallet Signatures

The Chinese University of Hong Kong, Shenzhen(香港中文大学(深圳));Shenzhen MSU-BIT University(深圳北理莫斯科大学)

Yuyang Qin, Haihan Duan

AI总结:

本研究通过设计签名语义解码器,探索用户在加密货币钱包签名过程中的认知偏差,并提出更透明和可信的界面设计方法。

摘要:

加密货币钱包已成为访问去中心化应用的主要入口,但用户往往难以辨别钱包签名到底是什么。先前的工作主要集中在缓解协议漏洞上,对用户如何感知和解释他们授权的内容关注有限。为了研究这个可用性-安全性差距,我们进行了两项形成性研究,探讨用户如何解读真实的签名请求以及他们依赖哪些线索来评估风险。发现显示,用户常常误读关键参数,低估高风险签名,并依赖表面熟悉度而非理解交易意图。基于这些见解,我们设计了签名语义解码器——一个原型框架,能够在确认前重建和可视化钱包签名背后的意图。通过结构化解析和语义标注,它展示了如何将签名数据转换为通俗语言解释并附上上下文风险提示。在被试间用户研究(N=128)中,使用原型的参与者在识别高风险签名的准确性、清晰度和决策信心方面均优于基线钱包界面,同时认知负荷更低。我们的研究将钱包签名重新定义为安全交互设计中的可解释性问题,并为更加透明和可信的加密货币钱包界面提供了设计启示。

英文摘要:

Cryptocurrency wallets have become the primary gateway to decentralized applications, yet users often face significant difficulty in discerning what a wallet signature actually does or entails. Prior work has mainly focused on mitigating protocol vulnerabilities, with limited attention to how users perceive and interpret what they are authorizing. To examine this usability-security gap, we conducted two formative studies investigating how users interpret authentic signing requests and what cues they rely on to assess risk. Findings reveal that users often misread critical parameters, underestimate high-risk signatures, and rely on superficial familiarity rather than understanding transaction intent. Building on these insights, we designed the Signature Semantic Decoder -- a prototype framework that reconstructs and visualizes the intent behind wallet signatures prior to confirmation. Through structured parsing and semantic labeling, it demonstrates how signing data can be transformed into plain-language explanations with contextual risk cues. In a between-subjects user study (N = 128), participants using the prototype achieved higher accuracy in identifying risky signatures, improved clarity and decision confidence, and lower cognitive workload compared with the baseline wallet interface. Our study reframes wallet signing as a problem of interpretability within secure interaction design and offers design implications for more transparent and trustworthy cryptocurrency wallet interfaces.

机构、总结、中文摘要均由AI分析而来,可能存在错误,请以论文正文为准。

↑