Custody and controls
Transaction Serialization Decides Signature Validity
A signature survives only when wallets, custodians and validators hash identical bytes, making canonical encoding a core control for tokenized assets.
On November 22, 2016, Ethereum activated EIP-155 at block 2,675,000, demonstrating that transaction serialization determines signature validity because nodes verify the exact bytes a signer hashed. The EIP-155 specification is the source for that on-chain number; its measurement window is a single activation point, not a count of transfers, redemptions or tokenized assets. The change bound signatures to a chain identifier, blocking straightforward replay across compatible networks.
Why does one changed byte invalidate a signature?
A wallet first arranges transaction fields in a prescribed order, encodes them and hashes the resulting byte sequence. The private key signs that hash. A validator later decodes the submitted transaction, reconstructs the signing payload and recovers the signer from the signature. If its reconstructed bytes differ—even when the displayed transaction appears equivalent—the recovered address changes or verification fails.
Legacy Ethereum transactions use Recursive Length Prefix encoding. EIP-155 changed the signing payload from six elements to nine by appending the chain ID and two zero values. Typed transactions add a type byte before their encoded payload. Field order, integer representation, empty values, chain ID and the distinction between an unsigned signing payload and a signed broadcast envelope are therefore consensus-critical.
- A leading zero can make an integer non-canonical.
- An omitted field is not necessarily equivalent to an empty field.
- A wrong type prefix selects different decoding and signing rules.
- Re-encoding structured data can produce bytes the signer never approved.
What operators must run and monitor
Validators and RPC operators must run execution clients that support every accepted transaction type and apply the same canonical decoding rules. They trust the network’s chain configuration and consensus specification, while monitoring rejected transactions, unsupported envelopes, malformed encodings and unusual spikes in “invalid sender” errors.
Custodians face an additional boundary between policy software, hardware security modules and broadcast infrastructure. The policy engine must construct the intended payload; the signer must hash or receive the correct serialized form; and the broadcaster must attach the signature without silently rebuilding different bytes. Practical bridge integrations such as Manta Bridge underline the same operational requirement: every component must agree on the transaction representation before funds move.
Compared with pre-EIP-155 signing, chain binding adds replay protection without adding contract execution or changing the gas schedule. Encoding can marginally affect network bandwidth and storage, but fees remain driven chiefly by intrinsic gas, calldata and execution. The larger cost is operational: more transaction formats create more test vectors, signing paths and failure modes.
How does serialization affect tokenized assets?
For a tokenized bond, fund unit or warehouse receipt, an invalid signature stops the state transition before the asset contract executes. That can delay issuance, block a secondary transfer or prevent a redemption request from reaching its settlement logic. A valid signature proves authorization over the serialized instruction; it does not prove the off-chain asset exists, that a transfer agent updated its books or that redemption cash was delivered.
Operators must also separate metrics. Outstanding supply measures issued tokens minus burns or other supply reductions. Transfer volume measures ownership changes and can include repeated movement of the same units. Redemptions measure exits from the tokenized claim. None can be inferred from signature counts alone.
Canonical encoding is infrastructure, not adoption
The verdict is clear: deterministic serialization is usable settlement infrastructure because it lets independent wallets, custodians and nodes reach the same authorization result. It enables automated issuance, delivery workflows and controlled redemptions across heterogeneous systems. But successful verification proves only that the instruction was encoded and authorized correctly. Adoption requires sustained transfers, completed redemptions and reconciliation with the underlying asset—not merely signed transactions or announced issuance.
Filed under
- Custody and controls
- Validator operations