Regresar al centro de seguridad

Malicious change in mixed transactions

Reportada en February 23, 2015

A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.

Fixed in 1.3.1.

Reportada por Nicolas Bacca
Trezor Model One