Key Takeaways
- Vitalik Buterin says wallet security should minimize the gap between what users intend to do and what transactions actually execute.
- He suggests transaction simulations so users can preview onchain outcomes and approve or cancel before signing.
- Buterin argues “perfect security” is impossible, so systems should reduce risk through layered, overlapping intent checks.
Ethereum co-founder Vitalik Buterin is calling for a shift in how the industry thinks about wallet safety.
He claims security and user experience (UX) are the same problem, because both aim to minimize the gap between what a user intends to do and what the system actually executes.
In a Feb. 22 post on X, Buterin defined security as minimizing “divergence” between user intent and system behavior, arguing that UX can be framed the same way — with security focusing on tail-risk scenarios where adversaries exploit confusing flows and high-impact mistakes.
“Simulate first, sign second”
Buterin’s most concrete wallet-level suggestion is transaction simulation: users specify the action they want, then approve only after seeing a preview of the on-chain consequences.
“The user specifies first what action they want to take, and then clicks ‘OK’ or ‘Cancel’ after seeing a simulation of the onchain consequences of that action,” he wrote.
The pitch targets a recurring weakness in wallet UX: users often experience transactions as a single “confirm” moment, while the underlying action can include permission changes and outcomes that are difficult to read at a glance.
Simulation aims to make those outcomes legible before a signature commits the action on-chain.
Tooling for transaction preview already exists in parts of the ecosystem, with some developer platforms offering simulation and preview features intended to show expected effects before execution.
Redundancy over perfection
Buterin argues “perfect security” is impossible because intent is not a neat, machine-readable object.
Even a simple goal like “send 1 ETH to Bob,” he wrote, hides real-world ambiguity around identity and context.
So instead of chasing perfect formalization, he advocates risk reduction through redundancy.
Users specify intent in multiple overlapping ways, and the system only acts when those signals align.
He listed examples ranging from simulations and “post-assertions” in transactions to multi-sig and social recovery, plus spending limits and confirmations that trigger when an action is unusual or high-risk.
Crucially, he warned that security should not mean adding friction everywhere. The goal is to make low-risk actions easy, and high-risk actions harder to do by accident.
Why It Matters Now
Buterin’s framing lands as Ethereum’s ecosystem increasingly treats user-facing security as core infrastructure.
Ethereum.org’s “Trillion Dollar Security (1TS)” effort describes an ecosystem-wide push to identify major security challenges and prioritize upgrades across the stack.
Separately, recent reporting says the Ethereum Foundation is sponsoring work with Security Alliance (SEAL) to disrupt wallet drainers targeting Ethereum users, a threat model that often depends on tricking users into signing actions they did not fully intend.
The Ethereum Foundation’s 2026 protocol priorities also list “Improve UX” as a core track, reinforcing Buterin’s UX-security framing.
The Direction: Wallets as Intent Interpreters
If intent-based security becomes standard, wallets will look less like signing tools and more like intent interpreters.
Users describe the goal, preview consequences, and stronger checks activate only when the action is unusual or permission-expanding.
The aim isn’t perfect security — it’s fewer catastrophic mistakes.
PhD, researcher and writer exploring AI, blockchain, and the philosophy of tech, with a focus on DeScAI, governance, and trust.
