You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Summery:
While utilizing the transfer command with the "--source multi" and "--target phat" options, along with the "--signing-keys phat,teo" parameter, I encountered an issue. Specifically, during the process, when the source account is initialized with a threshold of 1, the transfer command prompts for only one account signature. However, it erroneously accepts any input for the second signature prompt, even without the correct password. This behavior might confuse users as it implies that the second key is not essential for the transaction.
Here is a summary of the encountered scenario:
Command:namadac transfer --source multi --target phat --token naan --amount 1 --signing-keys phat,teo
Response from the console:Enter your decryption password: [Correct password for key 1]
Enter your decryption password: [Any input is accepted for key 2]
Transaction added to mempool.
I believe addressing this issue could enhance the clarity and security of the transfer process for users. It's essential to ensure that when the source account is initialized with a threshold of 1, only one account signature should be required during the transfer process.
The text was updated successfully, but these errors were encountered:
Title:
Finding Security Vulnerabilities
Summery:
While utilizing the transfer command with the "--source multi" and "--target phat" options, along with the "--signing-keys phat,teo" parameter, I encountered an issue. Specifically, during the process, when the source account is initialized with a threshold of 1, the transfer command prompts for only one account signature. However, it erroneously accepts any input for the second signature prompt, even without the correct password. This behavior might confuse users as it implies that the second key is not essential for the transaction.
Here is a summary of the encountered scenario:
Command:namadac transfer --source multi --target phat --token naan --amount 1 --signing-keys phat,teo
Response from the console:Enter your decryption password: [Correct password for key 1]
Enter your decryption password: [Any input is accepted for key 2]
Transaction added to mempool.
I believe addressing this issue could enhance the clarity and security of the transfer process for users. It's essential to ensure that when the source account is initialized with a threshold of 1, only one account signature should be required during the transfer process.
The text was updated successfully, but these errors were encountered: