EF Blog: how native transaction assertions could enforce a transaction's final outcome
. The post separates two failure modes. In an intent mismatch (Bybit, BadgerDAO), a compromised frontend supplied a signing request that differed from what users believed they were approving. In an outcome mismatch (the Aave and CoW collateral swap), a user swapped about $50.4 million of aEthUSDT and received tokens worth about $36,000. What all cases lacked was a rule over the resulting state, defined independently of the transaction builder and enforced during execution. Ethereum has no general mechanism for onchain code to inspect all the net state changes and events a transaction produces; EIP-7906 is one possible approach, alongside Clear Signing.
