bitshares / bitshares/bitshares-core

Transfer only to whitelisted Accounts and trade only with whitelisted Assets

Open
#1,044 5 comments 0 reactions 0 assignees View on GitHub
1b User Story 2a Discussion Needed 3b Feature 4a Low Priority 6 API 6 CLI 6 Protocol 6 Security 6 UX feature hardfork
Dominant language
C++
Stars
1.2k
Forks
660
Avg merge
8h 17m
Merged PRs (30d)
26

Description

As a user with security concerns I would like to secure my additional accounts by limiting the ability to transfer tokens only to whitelisted accounts. Additionally, I would like these accounts to be able to exchange tokens only for whitelisted tokens

Two new policy mode:

* TRANSFER FUNDS TO WHITELISTED ACCOUNTS ONLY (Allow ALL by default)
[comma separated list: eg. my-bot-1, my-bot-2, my-primary-account-1, my-primary-account-2]

* TRADE WITH WHITELISTED ASSETS ONLY (Allow ALL by default)
[comma separated list: eg. BTS, bitUSD, bitCNY]

whitelist can only be managed by the Account Owner (OWNER Priv Key).
Such permissions would have to be given separately for each ACTIV key (if there are more than 1)

if ACTIVE key get compromised by the hacker, He would by able to "bad trade" on defined trading pairs and he will not be able to transfer funds to account other then whitelisted

Contributor guide

No contributing guide indexed for this repository

Research direction

The issue names no files, tests, or entry points. Start by locating the existing policy modes and authorization paths for transfers, trading, account ownership, and active keys. Done means owner-managed per-active-key whitelists restrict transfers and traded assets while preserving the stated allow-all defaults.

Written by the indexing model from the issue text.

Assessment

Tech stack
cpp
Domain
authorization, blockchain, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.