diff options
| author | Adam Soltys <[email protected]> | 2026-09-06 18:09:16 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-09-06 18:09:16 -0700 |
| commit | 95cf88f1246118eb6a672a5b4b6545331c9ddef4 (patch) | |
| tree | e704b2f49fad1fb57111db64a3500bfdc08f5a39 /src/format.js | |
| parent | dcfabe9165e7b0f48d9d3f645f762b84e6bc48b8 (diff) | |
| download | coinosv3-95cf88f1246118eb6a672a5b4b6545331c9ddef4.tar.gz coinosv3-95cf88f1246118eb6a672a5b4b6545331c9ddef4.zip | |
Interim safety for on-chain gifts ahead of the crypto redesign. (1) On-chain (Savings) gift creation now shows a hard bearer-risk warning: the presigned input is redirectable, a sweeper bot is actively front-running shared links, so share privately and claim immediately (Spending/ark gifts are unaffected). (2) The false "success" is fixed: a broadcast returning OK was never proof WE won — a higher-fee sweep can evict our claim (the "claimed! → empty wallet" the bot produced). verifyClaimWon now polls the funding coin after broadcast and, if it settles spent by a txid that isn't ours, retracts the celebration and shows the already-taken screen. Full architectural fix (ephemeral-key gifts, non-malleable SIGHASH_ALL claim) is next
Co-Authored-By: Claude Fable 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01MGzU12QrAA4G6BYGzGVdXz
Diffstat (limited to 'src/format.js')
0 files changed, 0 insertions, 0 deletions