bitshares / bitshares/bitshares-ui
Part of #2456 - GUI bug for attacking specific accounts
Open
[0] Tracked Elsewhere
- Dominant language
- JavaScript
- Stars
- 520
- Forks
- 575
- Avg merge
- 12h 7m
- Merged PRs (30d)
- 5
Description
at initial conecting, the GUI regard all the accounts with the same address as the accounts in the local wallet and get data accordingly, this provide chance for hacker to attack specific accounts to make it not able to connect, https://bitsharestalk.org/index.php?topic=27613.0 [4d]
Contributor guide
Research direction
Start by reviewing the linked BitShares forum report and tracing the GUI's initial connection and account-matching flow. Confirm how accounts sharing an address are treated and define a safe behavior that prevents a remote account from disrupting local-wallet connectivity; the issue provides no file or test names.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- blockchain, javascript, react
- Domain
- blockchain, frontend, security
- Issue type
- Bug
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 20/100