MetaMask / MetaMask/metamask-extension
Cross Network Use of Accounts Should Return Warning Message
- Dominant language
- TypeScript
- Stars
- 13.2k
- Forks
- 5.6k
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 451
Description
* I expected that MetaMask would warn me against using Truffle TestRPC accounts on the Main Net, or at least silo accounts between networks. I also expect metamask would return an error if I tried to purchase ETH for a TestRPC account.
* MetaMask allowed me to import the private keys from Truffle TestRPC and interact with the Main Net. I was able to link through the buy button and fund this account with 0.001 Ether from Coinbase. That ETH was captured within 3 blocks.
* Browser: Chrome
* OS: MacOS 10.13.3
Full write up here: https://medium.com/@andersonmmi/truffle-testrpc-accounts-can-cost-unwarry-developers-real-world-ether-c314c9bc970a
Contributor guide
Research direction
The issue names no source files, tests, or entry points. Read the linked write-up and reproduce the cross-network account and funding scenarios first; clarify whether the expected result is a warning, account isolation, or a purchase error before identifying the affected code and tests.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- typescript
- Domain
- security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100