Solana signing display improvement

Gemeldet auf June 12, 2026

Certain Solana account-creation instructions did not surface all signed fields on the device's confirmation screen, weakening the What-You-See-Is-What-You-Sign guarantee for those flows. The affected screens now display the complete set of relevant fields prior to confirmation.

Behobene Sicherheitslücken

Gemeldet durch Community. Untersucht. Gelöst. Weil deine Sicherheit nie optional ist.

Unauthenticated Remote DoS via xpub Change-Index Amplification
19. Mai 2026
Unauthenticated Remote Memory Exhaustion via Unbounded Timestamp Array
19. Mai 2026
Ethereum's SLIP-24 payment-request branch in production firmware signs attacker calldata under cover of verified-swap UI
16. Mai 2026
Cross-Origin Popup Takeover in Trezor Connect popup
3. Mai 2026
Lock bypass in SD-protect-only configuration allows signing after LockDevice/autolock
14. April 2026
Solana ALT recipient confirmation mismatch
6. April 2026