ContractCheck.info
Be sure to interact with the correct smart contract. A community-based approach to verify smart-contract addresses to prevent frontend hacks and over-reliance on block explorers.
Demo
About
The problem it solves The problem it solves: be sure to interact with the correct smart contract when signing a transaction. Today the only way to verify if a smart contract is the “correct” one is to go on etherscan and check the number of transactions, read the code, etc. However this approach suffers multiple issues: first, you need to be tech-savvy to understand block explorers and reading contracts, then it creates a single source of truth via block explorer which is bad for decentralization. Also what if the block explorer is slow or down? Contract check solves this issue using a community-based approach inspired both by PGP key signing party and TLS certificates. The way it works is the following: anyone can create a “certificate” for a smart-contract address which is stored on-chain. If you find this certificate trustworthy, you can validate it. This will add your address to a list of validators of the certificate. An end user can then get a pretty good impression on if the certificate and thus the smart contract address is legit. Does the certificate have validators with ENS you know? Is the certificate quite old? Is the certificate signed by many validators?
How it's made
Challenges we ran into No particular challenges!