Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add info about address poisoning attacks #1088

Open
GBKS opened this issue May 8, 2024 · 0 comments
Open

Add info about address poisoning attacks #1088

GBKS opened this issue May 8, 2024 · 0 comments
Labels
Design Task is about designing something. Documentation Improvements or additions to documentation

Comments

@GBKS
Copy link
Contributor

GBKS commented May 8, 2024

There was another address poisoning attack incident over the weekend, and discussion around address UX followed. I put together a quick mock of how wallets could warn about this.

My proposed addition would either go in the address page in the glossary, or the send page. We would suggest that wallets look at their transaction/address history and try to find identical or similar addresses to what the user has entered. Based on the finding (like an address with the same start and end that only sent dust to the wallet), the UI could ask the user to double-check or use a different address.

Peter Todd stated that this should have been baked into the Bech32 address format (bc1-qep2un4-cvwmhf...), but to me it's more of a UI-level issue. We should be able to rely on wallets to do some basic checks for us and help prevent mistakes.

image

@GBKS GBKS added Documentation Improvements or additions to documentation Design Task is about designing something. labels May 8, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Design Task is about designing something. Documentation Improvements or additions to documentation
Projects
Status: Todo 📝
Development

No branches or pull requests

1 participant