|
[ghost-eye] Validator commission input unbounded: typo of 429.5+ saturates to u32::MAX and signs with one Enter
|
|
1
|
5
|
October 11, 2026
|
|
[ghost-eye] Single D keypress irreversibly deletes a wallet seed, no confirmation, no backup
|
|
1
|
6
|
October 11, 2026
|
|
[ghost-eye] Malformed RPC responses panic the app; crash loop on restart via the per-tick block-range fetch
|
|
1
|
4
|
October 11, 2026
|
|
Informational: sign-on-Enter without confirmation screen; f64 amount-parsing dust
|
|
0
|
5
|
October 7, 2026
|
|
[H1] ghost-eye stores sr25519 seeds in plaintext on disk — wallet-keys, address-book, and node stash keys world-readable
|
|
4
|
28
|
October 5, 2026
|
|
Wallet name with ':' corrupts file format, persistent panic on every startup
|
|
0
|
5
|
October 5, 2026
|
|
SS58 version validation fall-through: wrong-network address still signed and submitted
|
|
0
|
5
|
October 5, 2026
|
|
Ghost-eye writes wallet and stash keys plaintext at default file permissions
|
|
1
|
21
|
October 3, 2026
|