返回安全门户

Monero unlock_time issue

报告时间:February 1, 2020

The Monero field unlock_time was not confirmed on the device's display. Since Monero network does not do any sanity checks for this field, this allows a perpetrator to lock user’s funds for a very long time by simply setting it to a very high value.

报告人 Sebastian Kung
Trezor Model T