什么是签名？What is a signature?
签名＝用你的私钥对一段信息盖章，证明这确实是你本人同意的。它不一定花钱：有的签名只是登录验证（免费、无害），有的却是在批准一笔授权或一次转账（会动你的资产）。钱包会弹出签名请求，你点确认，就等于盖了章。A signature = stamping a message with your private key to prove that you personally agree to it. It doesn't necessarily cost money: some signatures are just login verification (free, harmless), while others are approving an authorization or a transfer (which moves your assets). Your wallet pops up a signature request, and clicking confirm is the same as stamping it.
常见有两类。一类是登录/验证签名，比如进某个DApp让你「签名以证明地址是你的」，通常不消耗gas、不转资产，相对安全。另一类是操作签名，它背后是授权或转账，一旦签下，对方就能据此动你的钱——危险的往往是这一类。There are two common kinds. One is the login/verification signature — for example, a DApp asks you to "sign to prove the address is yours"; it usually costs no gas and moves no assets, so it's relatively safe. The other is the action signature, which is backed by an approval or a transfer — once signed, the other party can move your money on that basis. The dangerous ones are usually this kind.
最大的坑叫盲签：弹窗里是一串看不懂的代码或含糊的描述，你没看清就点了确认。钓鱼网站最爱这一招，把「授权骗子合约划走你所有资产」伪装成一次普通签名。看不懂的签名，宁可不签。The biggest trap is called blind signing: the popup shows a string of code you can't read or a vague description, and you click confirm without understanding it. Phishing sites love this move, disguising "approve a scam contract to drain all your assets" as an ordinary signature. If you can't understand a signature, better not to sign.
好习惯：Good habits:
- 签名前读清楚钱包弹窗的说明，搞清这是登录还是在动资产Read the wallet popup's description carefully before signing, and figure out whether it's a login or something that moves assets
- 对方地址、金额、授权额度等关键信息要核对Verify key details like the counterparty address, amount, and approval allowance
- 只在官方DApp里签名，核对网址Only sign inside official DApps, and check the URL
- 遇到看不懂、说不清、催你快签的，一律停手If it's something you can't understand or explain, or you're being rushed to sign, stop
📝 本节测验📝 Quiz
1. 签名在区块链里是指什么？1. What does a signature mean on a blockchain?
2. 下列哪种签名相对更需要警惕？2. Which kind of signature warrants more caution?
3. 「盲签」指的是？3. What does "blind signing" refer to?
4. 遇到一段看不懂、还催你「快签否则错过」的签名请求，应该？4. If you get a signature request you can't understand that also rushes you to "sign now or miss out", you should?
5. 关于签名，正确的说法是？5. Which statement about signatures is correct?
❓ 常见问题❓ FAQ
签名和转账、授权到底啥关系？How exactly do signatures relate to transfers and approvals?
签名是底层动作——转账和授权都要靠你签名来放行。所以危险不在「签名」这个词，而在你签的那条信息内容：是无害的登录，还是一笔会动钱的授权或转账。Signing is the underlying action — both transfers and approvals rely on your signature to go through. So the danger isn't in the word "signature" itself, but in the content of the message you sign: is it a harmless login, or an approval or transfer that moves money.
免费的签名（不花gas）就一定安全吗？Is a free signature (no gas) always safe?
不一定。有些恶意签名（比如离线授权类）确实不立即花gas，却能被对方拿去动你的资产。是否安全要看签名内容本身，不能只凭「免不免费」判断。Not necessarily. Some malicious signatures (such as off-chain approval types) really don't cost gas immediately, yet can be used by the other party to move your assets. Whether it's safe depends on the signature content itself — you can't judge by "free or not" alone.
钱包弹窗里的签名内容看不懂怎么办？What if I can't understand the signature content in the wallet popup?
最稳的做法就是不签。可以先退出，核对自己是不是在官方网址、这步操作是否必要。看不懂、说不清、被催促，三者任一出现，都应当停手。The safest thing is not to sign. You can back out first and check whether you're on the official URL and whether this step is even necessary. If any one of the three appears — you can't understand it, you can't explain it, or you're being rushed — you should stop.