Voltar para o portal de segurança
Solana signing display improvement
Reportado em June 12, 2026
Certain Solana account-creation instructions did not surface all signed fields on the device's confirmation screen, weakening the What-You-See-Is-What-You-Sign guarantee for those flows. The affected screens now display the complete set of relevant fields prior to confirmation.
Vulnerabilidades resolvidas
Reportado pela comunidade. Investigado. Resolvido. Porque sua segurança nunca é opcional.
- Unauthenticated Remote DoS via xpub Change-Index Amplification19 de maio de 2026
- Unauthenticated Remote Memory Exhaustion via Unbounded Timestamp Array19 de maio de 2026
- Ethereum's SLIP-24 payment-request branch in production firmware signs attacker calldata under cover of verified-swap UI16 de maio de 2026
- Cross-Origin Popup Takeover in Trezor Connect popup3 de maio de 2026
- Lock bypass in SD-protect-only configuration allows signing after LockDevice/autolock14 de abril de 2026
- Solana ALT recipient confirmation mismatch6 de abril de 2026