Announcing a Trillion Dollar Security grant for WEBCAT

The Ethereum Foundation's Trillion Dollar Security initiative has awarded a grant to Freedom of the Press Foundation to develop WEBCAT, an open source browser tool that verifies website code integrity against a signed manifest. The grant addresses the front-end verification gap in Ethereum wallets and apps, where HTTPS alone cannot confirm that served code matches what developers published. WEBCAT uses a distributed enrollment system with cryptographic fingerprints to let browsers verify enrolled sites locally. The funding covers a verification library wallets can integrate directly, research into Chrome/Chromium support, an independent security audit, and an ERC standard for wallet developers. Originally built to protect SecureDrop's end-to-end encryption from server-side code tampering, WEBCAT's code-integrity approach applies equally to Ethereum front ends vulnerable to DNS hijacks and supply-chain attacks.