Part 2/12:
Transparency of Data: Does the wallet display all relevant signing information clearly? This includes showing detailed EIP712 data—such as domain and message hashes—as well as transaction call data, including to addresses, contract details, gas, nonce, and more.
User Verification: Is it easy for the user, especially a developer or security researcher, to verify exactly what they are signing? The epidemic of blindly signing transactions that contain malicious data was a primary concern.
Open-Sourced Code: Is the wallet's firmware and software open source? Reproducibility and transparency are crucial, as proprietary code could hide malicious features or backdoors.