File: packages/agent/src/sentinel/refund-guard.ts:14-18
Checks if TX signatures include PDA as substring — base58 signatures never contain PDA strings. Always returns true.
Fix: Check transaction account lists instead, or remove until proper in-flight detection.
Ref: PR #70 audit
File:
packages/agent/src/sentinel/refund-guard.ts:14-18Checks if TX signatures include PDA as substring — base58 signatures never contain PDA strings. Always returns true.
Fix: Check transaction account lists instead, or remove until proper in-flight detection.
Ref: PR #70 audit