EIP-712 Typed Data
Pronunciation: E-I-P-7-1-2 TYPT DAY-tuh
Definition
EIP-712 Typed Data is an Ethereum standard for hashing and signing structured data with explicit types and domain information so wallets can present more meaningful authorization details. It improves readability and domain separation but does not guarantee that a contract, spender, message, or requested action is safe. Implementations should verify type encoding, domain fields, chain and verifying-contract identifiers, nonce and expiry, displayed values, signature recovery, contract-wallet behavior, replay resistance, and consistency between the signed message and executed action.
Overview
EIP-712 Typed Data is an Ethereum standard for hashing and signing structured data with explicit types and domain information so wallets can present more meaningful authorization details. The control exists to reduce technical, fraud, and financial risk arising from blockchain transactions, signatures, smart contracts, clients, bridges, wallets, and public transaction data. It improves readability and domain separation but does not guarantee that a contract, spender, message, or requested action is safe. It should be interpreted alongside Cross-Chain Replay Attack because the concepts can affect the same decision without representing the same control, event, or risk.
The workflow identifies the exact network, contract, implementation, message, signer, asset, dependency, and expected state transition. Systems should verify domain and chain context, authoritative addresses, signatures, nonces, code or client versions, confirmations, and the difference between observable data and inferred ownership. In this context, implementations should verify type encoding, domain fields, chain and verifying-contract identifiers, nonce and expiry, displayed values, signature recovery, contract-wallet behavior, replay resistance, and consistency between the signed message and executed action.
It should connect the term to Approval Phishing where that relationship changes access, transaction treatment, investigation, communication, or recovery.
Records should retain transaction and block identifiers, contract addresses, network and chain ID, decoded input, signer, signature domain, client version, timestamps, confirmations, attribution source, alerts, decisions, and resulting state. Reorganizations, bridges, proxies, and off-chain dependencies require explicit treatment.
Useful measures include affected value, suspicious exposure, signature warnings, replay or duplicate attempts, client concentration, failed validation, contract mismatches, investigation time, unresolved attribution, and recovery outcomes.
The relationship with Contract Verification should be documented where it affects residual risk or control ownership.
Key Takeaway
Implementations should verify type encoding, domain fields, chain and verifying-contract identifiers, nonce and expiry, displayed values, signature recovery, contract-wallet behavior, replay resistance, and consistency between the signed message and executed action.
Sources
- EIP-712: Typed Structured Data Hashing and Signing — Ethereum Improvement Proposals (2026-08-03)
- EIP-155: Simple Replay Attack Protection — Ethereum Improvement Proposals (2026-08-03)
- Ethereum Security and Scam Prevention — Ethereum Foundation (2026-08-03)