gst-extension-wallet
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| [ghost-extension-wallet] Sign-request popup renders blank on undecodable calldata; no error boundary |
|
2 | 6 | October 13, 2026 |
| [High] Content script bridge trusts a spoofable origin field in sign requests |
|
4 | 20 | October 12, 2026 |
| No dapp connection authorization: any site can enumerate accounts and spam sign popups |
|
3 | 19 | October 11, 2026 |
| Extension derives the wrong scheme key for Ed25519 and ECDSA, the created account cannot sign at all |
|
3 | 14 | October 7, 2026 |
| Informational hardening notes batch (ghost-dao-interface, ghost-extension-wallet, ghost-lite) |
|
0 | 5 | October 7, 2026 |
| No auto-lock: unlock session lasts as long as the browser lives |
|
1 | 4 | October 6, 2026 |