Wallets & SecurityAdvanced
Transaction origin phishing
An attack that exploits a contract using the original transaction sender as its authorization check.
PLAIN-ENGLISH DEFINITION
In more detail
In the EVM, tx.origin can remain the user's address even when a malicious intermediary calls another contract. Authorizing sensitive actions using that value can therefore let a deceptive interaction misuse the user's identity.
IN THE WILD
How you might use it
A user calls a hostile app, which calls another contract whose permission check incorrectly trusts tx.origin.
Got a way to make Transaction origin phishing click?
Add your takeBy Crypto Dictionary · Published
Go to the source
Use the original reference to explore the details behind this entry.
Read the referenceAn original explanation with a reference to follow. Protocol details and community usage can evolve. Sources & standards