Malicious change in mixed transactions

Dilaporkan pada February 23, 2015

A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.

Fixed in 1.3.1.

Dilaporkan oleh Nicolas Bacca

Trezor Model One

Kerentanan yang teratasi

Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.