Warnings explained

ERA LENS — the decoder that turns the request into readable rows — checks every transaction before you do. When something is worth a second look it says so in one of three places: a mark next to the row it applies to, a risk list shown before the review, or a full-screen stop where ERA refuses to sign at all. None of them means ERA is broken — each means this request differs from a plain, well-formed transaction for your wallet. When in doubt, cancel: a cancelled transaction costs nothing.

Steps

The marks on a row

Every mark belongs to one of four levels. The louder two also move that row up so you see it without switching modes.

A row that carries a mark is drawn in a box — that is also how you know it can be tapped.

Read what a mark means

1. Tap the row. ERA opens a panel with the row's full value and one line per finding, the most serious first.

   

2. Tap anywhere to close the panel.

The blinking badge: every finding in one place

You do not have to hunt for the marked rows. Whenever ERA LENS finds anything at Warning level or above, a badge appears in the top-right corner of the review and blinks for as long as the review is open.

1. Tap the badge. ERA hides the transaction and shows the findings one per page: the mark, its name, the sentence explaining it, and the row it belongs to. The header counts them — RISKS 1/2 — and the bottom button reads FULL INFO.

   

2. Swipe up to read the next finding.

3. Tap FULL INFO to go back to the transaction, where the same findings sit on their own rows.

Note: The two routes show the same findings from opposite ends. The badge answers "what did ERA LENS find in this transaction?"; tapping a row answers "why is this row marked?". Use the badge to be sure you have seen everything — a finding can belong to a part of the request that ERA does not print as a row of its own, and then the badge is the only way to reach it.

A request with warnings but no dangers never shows the risk list — the badge is the only summary you get, so it is worth a tap on every review that has one.

The risk list, before the review

1. If the request carries anything at Danger level, ERA shows a summary first and will not open the review until you pass it. The headline counts the findings; NEXT continues to the review, the back chevron declines the transaction.

   

2. BLIND SIGNING has its own row, above the counted ones, and appears whenever any part of the request could not be read. It carries no number: either the request is readable or it is not.

   

   

3. The rows below it count what was found, loudest first: DANGER, then WARNING. Information and Recognised marks are never listed here — you meet those on the rows themselves.

Caution: The risk list is not only about unreadable requests. An unlimited approval to an address ERA cannot identify, a contract taking control of your account, or a field that is not covered by your signature all bring you here with everything perfectly readable.

What the serious marks say

The device prints a full sentence for every finding, so you never have to remember these. These are the ones that decide whether to sign.

Danger — do not approve unless you can explain why it is there

Warning — check it, then decide

Information marks explain a row — a fee recipient, a bridge minimum, an amount the contract computes at execution, a payout that is expected rather than guaranteed. Recognised ("Known address") means the address matched your whitelist.

The device refuses: CHANGE FRAUD

1. CHANGE FRAUD means the transaction marks an output as "your change" but the address is not in your wallet. ERA does not sign. Tap CLOSE.

   

2. Rebuild the transaction in the software wallet. If the warning returns, the software wallet or the computer it runs on may be compromised — move to a clean device before sending anything.

The device refuses: INVALID REQUEST

1. INVALID REQUEST means the QR code is not a transaction ERA can handle: wrong wallet, unsupported chain, or not a transaction at all. Tap REPEAT to scan again or CANCEL to leave.

   

2. Check that the software wallet is linked to this ERA wallet, then scan again. Plain text or website QR codes are ignored by the scanner — nothing happens.

Unknown descriptor (multisig)

1. UNKNOWN DESCRIPTOR means the transaction spends from a multisig wallet whose setup (descriptor) is not saved on this ERA. Tap CANCEL unless you know why.

   

2. If you tap CONTINUE, the review shows Descriptor Not registered and lists every output as a recipient, because change cannot be verified.

   

3. To avoid the warning, import the multisig setup first: wallet settings > Bitcoin Multisig (see Bitcoin multisig).

High fee

1. When the fee is 5 % or more of the amount sent, the review carries Warning: Fee is N% of the total value. ERA still lets you approve.

   

2. Go back to the software wallet and lower the fee unless you chose it on purpose (small amounts often trigger this).

Find your wallet (Quick Sign)

1. With SCAN QR from the main menu, ERA looks for the wallet the request belongs to. If none matches you see FIND YOUR WALLET.

   

2. Tap SELECT WALLET to pick the wallet yourself, PASSPHRASE if the wallet needs its passphrase to match, or CANCEL.

Chains ERA cannot decode at all

On a few chains (for example Sui and TON) ERA cannot read the transaction's contents, and a full-screen BLIND SIGNING page appears instead of a review. Tap CANCEL unless you built the transaction yourself; CONTINUE shows only the data size and the network. On Ethereum and the other EVM chains you will not see this page — an unreadable EVM request goes to the risk list instead, with the crossed-out eye.

The app warns you before ERA does (ERA Wallet app)

The ERA Wallet app simulates a transaction before it sends it to the device. When the result is dangerous — most often a request that would let a contract spend an unlimited amount of one of your tokens — the sheet turns red, hides the QR code, and asks you to tick I understand the risk before Sign anyway becomes available. Reject is the highlighted button.

9:41

This is a second opinion, not the security boundary: ERA still shows you its own review pages, and nothing is signed until you approve on the device.

Done

You can tell the three kinds apart: the stops (CHANGE FRAUD, INVALID REQUEST) where ERA will not sign; the risk list that opens before a review carrying anything at Danger level; and the marks on rows, from a recognised address through to an unreadable one — reachable either by tapping the row or through the blinking badge in the review's top-right corner.

Trouble?

• Every transaction from one software wallet carries a warning → re-link that wallet to ERA (see Link a software wallet); if it persists, try another software wallet.

• A row is marked but the panel says a newer parser reported it → the request uses a finding this firmware does not know yet. Update the device, see Update the firmware over NFC.

• The risk list counts more findings than you can find on the rows → tap the blinking badge in the review's top-right corner and read them there; a finding can belong to a part of the request ERA does not print as a row of its own.

Related

• Signing a transaction

• Sign an Ethereum or token transaction

• Sign a Bitcoin transaction

• SCAN QR: one button for everything