Important context here that's being missed in a lot of the takes. This was not a malicious transaction. The user was warned of risks and high slippage. There was a confirmation checkbox. They proceeded knowingly on mobile. Calling this a "malicious transaction" is just wrong. CoW Swap worked as designed. The risk disclosure worked as designed. The user made a choice, and that comes with the freedom of defi. That doesn't mean we can't do better. We can and should. Clearer friction for outsized trades. Better mobile UX for high-stakes confirmations. Smarter guardrails that don't compromise permissionlessness. Let's also be precise about what actually happened. Misdiagnosing the problem guarantees we build the wrong solution. The real issue isn't blind signing. It's that $50M decisions deserve better education infrastructure around them.