@misc{indiciae8f9e2911bf73, title = {Signing the Transaction but Not the Decision: Whisper Attacks and a Binding Defense for AP2}, author = {Yedidel Louck and Amit Dvir and Ariel Stulman}, year = {2026}, url = {https://arxiv.org/abs/2609.11757}, note = {Source identifier: 2609.11757} }