theseus/bundled-addons/aegis
Local Dev 1db2c4265b Aegis: refuse a Tron transaction whose fields appear twice
The decoder read the first copy of a singular protobuf field; java-tron
keeps the last. Any.value is opaque bytes, so a TransferContract carrying
two recipients and two amounts hashes to the same txid either way: the
overlay showed "1 TRX to X" while the chain would move 999 TRX to
another address. It also defeated the plan-time and sign-time draft checks
against a hostile node. A repeated singular field, or a known field with
the wrong wire type, now refuses the transaction.
2026-10-04 02:11:41 +02:00
..
lib Aegis: refuse a Tron transaction whose fields appear twice 2026-10-04 02:11:41 +02:00
addon.json Aegis 0.30.0: start the dapp-bridge audit batch 2026-10-03 22:47:48 +02:00
electrum-servers.json Ship Theseus 0.3.28 5d15508b (Aegis update card + DevTools in tab sidebar + real favicons) 2026-09-08 18:17:25 +02:00
index.js Aegis: WizardConnect signing requests can be approved 2026-10-03 23:01:15 +02:00
panel.html perf(aegis): 251 KB off every panel open — jsQR loads when it is wanted 2026-10-03 16:39:45 +02:00
panel.js Aegis: a plain Connect now lasts for the session 2026-10-03 22:49:15 +02:00
qr.js Ship Theseus 0.3.28 5d15508b (Aegis update card + DevTools in tab sidebar + real favicons) 2026-09-08 18:17:25 +02:00
wallet-inject.js Aegis: only the page's own scripts can reach the wallet relay 2026-10-03 22:54:59 +02:00