Back to security portal
Stellar signer weight not shown when adding a signer
Reported on August 8, 2026
When adding a signer to a Stellar account, the device didn’t show the signer’s weight, so a malicious host could give that signer more authority than the user intended. Fixed in firmware 2.12.5.
Reported by Derek H
Reward 650 USD
Resolved vulnerabilities
Reported by community. Investigated. Resolved. Because your security is never optional.
- Authenticity proofs not bounded to their secure element on TS7August 16, 2026
- Missing bounds check in JPEG image decodingAugust 12, 2026
- E-shop eGift card amount could be set outside the allowed valuesAugust 7, 2026
- Solana token transfer displays the address lookup table account instead of the token mintAugust 4, 2026
- Solana stake lockup settings not shown when stakingAugust 4, 2026
- Ethereum 1inch swap minimum output not shown on the deviceAugust 1, 2026