// wallet security

What the wallet signature does.

Spark Pro uses a Sign-In with Ethereum message on Base to prove wallet ownership. It cannot move funds, approve tokens, create a permit, or submit a transaction.

01 Domain-bound

The message is bound to pro.sparkswarm.ai, includes the Spark Pro URI, and expires after a short window.

02 Base-bound

The message includes Chain ID 8453. Production checks fail if x402 or wallet binding is not configured for Base.

03 No approvals

The member page never calls transaction, permit, approval, or typed-data signing methods for wallet binding.

// expected message

Safe prompt shape.

The wallet will show this structure. The nonce and time change per attempt.

pro.sparkswarm.ai wants you to sign in with your Ethereum account:
0xYourWallet

Bind this wallet to Spark Pro on Base. This is a gasless signature, not a transaction, token approval, permit, or transfer.

URI: https://pro.sparkswarm.ai
Version: 1
Chain ID: 8453
Nonce: unique-one-time-nonce
Issued At: current-time
Expiration Time: short-expiry
Resources:
- https://pro.sparkswarm.ai/wallet-security.html