Malicious change in mixed transactions

Dilaporkan pada March 2, 2020

A specially crafted multisig transaction could leverage a ToCToU bug to include a change output of an attacker, which wasn't confirmed by the user.

Dilaporkan oleh Saleem Rashid

Trezor Model T

Kerentanan yang teratasi

Dilaporkan komunitas. Diselidiki. Diselesaikan. Karena keamanan Anda tidak pernah opsional.