All tools / EIP-3009

EIP-3009 authorization checklist

A local checklist before you sign an EIP-3009 authorization.

from is the payer
The address that will show as the token sender is the one you expect.
to matches payTo
The authorization recipient is the requirement payTo, not a lookalike.
value matches the atomic amount
The integer value uses token decimals. For USDC, 1 USDC is 1000000.
The time window is still open
validAfter is in the past and validBefore is in the future, with room to submit.
Nonce is a fresh 32-byte value
Reusing a nonce makes a valid signature fail as already used.
Domain matches the token
name, version, chainId, and verifyingContract match the token contract you expect.
No signing key in the page
This checklist does not ask for a key. Clear the page if you pasted one.

Before you sign

Ticks stay in this tab. The list does not build or submit an authorization.