커뮤니티 신뢰 붕괴: Discord, MetaMask, 그리고 "클릭하여 서명"의 종말

TL;DR:

• The Threat: Attackers are seizing control of verified Discord announcement channels to trick loyal users into signing malicious transactions.
• The Vulnerability: "Blind Signing"—where users approve complex hex strings in a hurry (FOMO)—has become a primary vector for wallet draining.
• The Pattern: Community trust is weaponized; the "verified source" bypasses standard user caution.
• The Defense: Zelf breaks this cycle with Intent Verification—requiring a deliberate biometric action via its stand-alone mobile app, preventing accidental "one-click" drains.

1. A popular NFT project or protocol has its Discord server compromised.
2. A hacker posts a "SURPRISE MINT!" link in the official #announcements channel.
3. Thousands of loyal users verify the source, click the link, and sign a transaction.
4. Wallet Drained.

The Blind Signing Problem

Friction is a Feature

• Intent Verification: Zelf doesn't just ask for a click. Because it uses ZK Face Proofs, the act of signing requires a deliberate, biometric action. You have to look at your phone.
• Decoupled from Browser: Zelf Wallet is a standalone mobile app, not a browser extension. A malicious link in Discord can't automatically pop up a transaction window in your Zelf app in the same seamless (and dangerous) way. You must initiate the connection via WalletConnect or a QR code, giving you a crucial moment to pause and think: "Is this real?"
• Smart Parsing: Our goal is to translate 0x... into human-readable "You are giving access to ALL your USDT."