Jupiter: Ledger Shows Readable Messages Instead of Blind Signing for Limit Orders and DCA
Jupiter is the first app to support Anza's new standard for off-chain messages. For limit orders and DCA, a Ledger used via Jupiter Wallet now shows readable text, per Jupiter, ending blind signing there.
What Happened
Jupiter says it is the first app to support Anza’s new standard for signing off-chain messages. It is used for limit orders and DCA in the Jupiter Wallet and on jup.ag. Per Jupiter, it is live with Ledger hardware wallets via the Jupiter Wallet. Jupiter sums it up this way: hardware wallets now sign messages you can read.
What Changes
- Off-chain messages are signatures that do not trigger a transaction, for example as proof of wallet ownership or as an order that a service executes later.
- Blind signing means approving something on a hardware wallet without seeing its content. For these orders, it is meant to go away at Jupiter with the new standard.
- Version 1 of the format is the currently recommended format, per Anza’s documentation. Among other changes, it removes the application domain field, which per Anza offered limited utility and created a spoofing surface. Whether a message is shown readably on the device depends on the device, not the format, per Anza.
The Boundary
Per the announcement, readable display applies to limit orders and DCA on Jupiter with Ledger via the Jupiter Wallet. Other apps and other signatures still need to adopt the standard. Basics of safe signing are covered in Solana wallet security; how Jupiter is built is covered in Jupiter explained.
Note: This is reporting, not investment advice.
What to Watch
- Which wallets and apps support the standard next
- Whether other hardware wallets besides Ledger follow
Sources
- Jupiter — Announcement on X
- Anza — Off-chain message signing specification
- SOLANA·HUB knowledge: Solana wallet security · Jupiter explained