On Polygon I only have dust in my account. On ETH I have small, but not negligible, amounts.
Say I grant a dApp permissions on Polygon, is there any risk of those permissions “leaking” over to Ethereum network (where there’s funds) as well?
Edit: Accounts do NOT all have same private key and so presume there’s no x-account leak risk, right? Same question re Accounts - is there any risk of permissions leaking across MM accounts seeing as they all have same private key?
I love this question! I’m going to learn on this one too.
Here are my thoughts (which, may not be correct) -
I think it would depend on what type of contract is signed. If it’s malicious, I think there are chances for all networks. (?)
For accounts, if someone has your secret recovery phrase they can access your funds on all networks. This is the only one I’m sure on
If they have a private key specific to one address in your wallet, they can also access across all networks for that specific address. I don’t think they could access any other addresses in the same wallet.
If anyone is interested in the difference of secret recovery phrases and private keys, here is a Knowledge Base article with some great info -
Hey @markblun, I can confirm this is correct. Signing parameters on a network is respective to that network only. Smart contracts and the dapps associated with them are deployed to their respective networks with their respective contract addresses.
Thanks all for the answers above. They are very helpful.
BUT! Everything is developing very quickly now, and web3 does not stand still. How to consider multichain services in such a situation? for example, multichain bridges, because they get access not only to one chain network, but also to others…
For a bridge transaction, you would only have to approve the transaction on the network you are bridging the token from. For example, if you are bridging from Ethereum to Polygon, you would only need to approve the transaction on Ethereum.
Yes. But I’m talking about the fact that if we often use a multi-chain bridge and make transactions using different networks, then the bridge, at different times, but still gets access to the wallet in different networks and not just in one. That is, if attackers can slip a false transaction using any dapp service, or somehow deceive us… then in services using multichain, all our networks may be at risk(
If you do use a bridge that supports multiple networks and you use that same bridge for multiple networks then it will have access across those networks. For your own safety and security, you must always do your own due diligence and research when using a bridge.
If you would like to ever remove your permissions a bridge has access to, you can do so on a block explorer. Here is more information on our Knowledge Base: