bitshares / bitshares/bitshares-ui

Increased user failsafe and security

Open
#2,460 4 comments 0 reactions 0 assignees View on GitHub
[1a] Epic
Dominant language
JavaScript
Stars
520
Forks
575
Avg merge
12h 7m
Merged PRs (30d)
5

Description

As we all know, the blockchain and Bitshares platform is a platform where no authority have mandate to do transaction rolebacks if a user does something unintended. A user can be tricked to do a type of action that will result in loss of funds for the user.

So far, we've done things in various places of the application to improve the experience and security for the user, and mitigate any type of mistake done.

**This Epic Issue should track all related issues to user failsafe, trickery and security enhancements**

## Possible angles of trickery and mistakes

### Proposed actions
This became a problem last year, where users recieved proposed actions in their wallets. Some where to send funds, others where to change account authority. We've mitigated this by enabling the possibility to hide proposed actions by scam accounts, for example.

### Sending funds to an account with similar name, aka scam accounts
It's an old trick to create account names with very similar names, resulting in funds being sent to the wrong place. The list of scam accounts grows, and UX is improved to alert the user about it.

### Sending funds to an inactive account
[Reading about a user](https://bitsharestalk.org/index.php?topic=27730.0) that sent funds to an inactive account on the forum, makes me wounder if it's possible to add a warning when an account that hasn't been used for x months when doing transactions.

## Related Issues
- Label assets owned by 'known scammers' as scam assets - #2391

Contributor guide

Open the contributing guide

Research direction

Start with the proposed-actions, similar-account, and inactive-account sections, then review related issue #2391. This is an epic rather than a scoped task, so a concrete enhancement and acceptance criteria must be identified before locating the relevant BitShares UI code; what counts as done is not defined here.

Written by the indexing model from the issue text.

Assessment

Tech stack
blockchain, javascript
Domain
blockchain, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
20/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.