ERC-7730 is a JSON format that tells a wallet how to turn a contract call or a signed message into a sentence a person can read, and nothing on-chain has to change for it to work. Its usefulness is therefore not a property of the standard. It depends on coverage, and on that measure the figure that matters is modest: the public descriptor registry grew its supported-contract count by roughly 28% in its first few months after the Ethereum Foundation launched it in May 2026.
"Clear Signing" is the marketing name. ERC-7730 is the specification underneath it, and the distinction matters to anyone signing a DeFi transaction, because the spec only changes what a hardware or software wallet displays. The transaction itself is untouched. A protocol without a descriptor gets no benefit at all, however good the wallet.
Three parts, none of them on the chain
The canonical EIP calls it a "Structured Data Clear Signing Format". It was created on February 7, 2024, is still marked Draft under Standards Track: ERC, and requires EIP-155 and EIP-712. It covers both smart contract calldata and EIP-712 typed messages. In practice the system has three parts.
The descriptor. A JSON file written by the protocol's authors, not by the wallet. It has three sections. Context binds the file to a specific contract (by chain ID and address) or to an EIP-712 domain, so the instructions cannot be applied to the wrong target. Metadata carries constants, token details such as decimals and tickers, enumerations and chain-dependent mappings. Display gives formatting rules for each function or message field, using dot-notation paths to point at parameters and interpolation to build a readable statement of intent. QuickNode's explainer gives the template shape: "Approve {spender} to spend {amount} {token}".
The registry. A public repository of descriptors, hosted at clearsigning.org by the Ethereum Foundation and, according to Cyfrin, freely mirrorable by anyone. Anyone may submit a descriptor. Whether a descriptor is accurate is a separate question, answered by ERC-8176 attestations: independent auditors use the Ethereum Attestation Service to vouch that a file describes its contract correctly, and each wallet decides which attestors it trusts.
The renderer. At signing time the wallet finds the descriptor matching the contract, decodes the raw calldata against it, and shows the result. On a hardware device that means the secure screen. Ledger's documentation is explicit that this "never modifies the transaction; it adds a display layer that is verified on the signer itself."
That is why no on-chain change is needed. The contract keeps its address and its code; the signed bytes are identical to what would have been signed blind. All the new information lives off-chain, in a file that points at the contract rather than inside it. The cost of that design is that every deployed contract needs someone to write, submit and maintain its descriptor.
Where it has turned up so far
Ledger introduced Clear Signing in 2023, ERC-7730 v1 followed in 2025, and v2, which added cross-chain support, privacy and encryption cases, and better handling of patterns such as ERC-4626 vaults, arrived in 2026 alongside a handover of stewardship to the Ethereum Foundation's Trillion Dollar Security Initiative. Ledger and Cyfrin date the launch to May 12, 2026; Unchained reports May 13. Three instances show the spec at work.
- An Aave supply. Cyfrin's open-source
clearsigtool turned raw calldata beginning0x6a761202into "Supply (Aave DAO) Amount to supply: 1000000, Collateral recipient: 0x9467...". That is the whole idea in one line: the same bytes, given a function name, a protocol and labeled parameters. - Trezor's rollout. On September 8, 2026, Trezor and the Ethereum Foundation announced support on the Safe 7, Safe 5, Safe 3 and Model T, working automatically through Trezor Suite, WalletConnect and Trezor Connect. The Model One is excluded. Six protocols had descriptors at launch: 1inch, Aave, Lido, Tether, LiFi and Hyperliquid. Device support is now one more line in comparing Ledger and Trezor.
- A wider list. By June 22, 2026, Ambire listed more than 27 protocols with published descriptors, among them Uniswap, Morpho, Ethena, Safe and Circle's USDC, with an example prompt of "Approve Uniswap to spend up to 100 USDC".
Not a signing scheme, not a guarantee
| Standard | What it does | What it does not do |
|---|---|---|
| EIP-712 | Defines how typed structured data is signed | Say how fields should be shown to a person |
| ERC-7730 | Tells a wallet how to display calldata and typed messages | Prove that the description is accurate |
| ERC-8176 | Lets auditors attest that a descriptor matches its contract | Describe anything itself |
| ERC-8213 | Gives a bytes-level fingerprint where no descriptor exists yet | Produce a readable sentence |
The strongest objection is QuickNode's: "readable does not mean verified." A descriptor can be wrong. It can lag behind a contract upgrade and describe code that no longer runs. Batched calls and delegatecalls remain hard to render. And a perfectly accurate prompt can still describe a harmful action, which is why clear signing does nothing about a token approval already granted to a router that is later compromised.
All of that is true, and none of it touches the conclusion. ERC-7730 never claimed to judge intent, only to state it. The attestation layer exists precisely because the format cannot vouch for itself, and the fallback exists because coverage is incomplete. The objection is a description of the spec's boundaries, not a flaw inside them.
What changes at the moment of signing
Three checks follow from the mechanism. First, whether the device can render descriptors at all: older hardware such as the Trezor Model One cannot, and on Ledger devices a third-party wallet needs a Clear Signing agreement with Ledger. Second, whether the protocol being used has a descriptor in the clearsigning.org registry; a 28% expansion in a few months is progress, not coverage, and anything outside the registry is still signed blind. Third, which attestors the wallet trusts, since a descriptor without an attestation is a protocol describing itself.
When a wallet that supports ERC-7730 falls back to raw hex, it is reporting that no one has described this contract, and that absence is itself the most useful information on the screen.
What does a hardware wallet show before a DeFi approval?
The pillar page sets the decoded prompt beside the raw calldata it replaces, device by device.
Read Clear Signing vs Blind Signing
Comments
No comments yet. Be the first to comment!
Leave a Comment