diff options
| author | Adam Soltys <[email protected]> | 2026-09-06 18:09:16 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-09-06 18:09:16 -0700 |
| commit | 95cf88f1246118eb6a672a5b4b6545331c9ddef4 (patch) | |
| tree | e704b2f49fad1fb57111db64a3500bfdc08f5a39 /src/i18n.js | |
| parent | dcfabe9165e7b0f48d9d3f645f762b84e6bc48b8 (diff) | |
| download | coinosv3-95cf88f1246118eb6a672a5b4b6545331c9ddef4.tar.gz coinosv3-95cf88f1246118eb6a672a5b4b6545331c9ddef4.zip | |
Interim safety for on-chain gifts ahead of the crypto redesign. (1) On-chain (Savings) gift creation now shows a hard bearer-risk warning: the presigned input is redirectable, a sweeper bot is actively front-running shared links, so share privately and claim immediately (Spending/ark gifts are unaffected). (2) The false "success" is fixed: a broadcast returning OK was never proof WE won — a higher-fee sweep can evict our claim (the "claimed! → empty wallet" the bot produced). verifyClaimWon now polls the funding coin after broadcast and, if it settles spent by a txid that isn't ours, retracts the celebration and shows the already-taken screen. Full architectural fix (ephemeral-key gifts, non-malleable SIGHASH_ALL claim) is next
Co-Authored-By: Claude Fable 5 <[email protected]>
Claude-Session: https://claude.ai/code/session_01MGzU12QrAA4G6BYGzGVdXz
Diffstat (limited to 'src/i18n.js')
| -rw-r--r-- | src/i18n.js | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/i18n.js b/src/i18n.js index b5db206..86fed95 100644 --- a/src/i18n.js +++ b/src/i18n.js @@ -911,6 +911,7 @@ const STR = { lnPayNetworkFee: 'Network fee', lnPayTotal: 'Total', lnPayConfirm: 'Pay', + giftChainWarn: '\u26a0 On-chain gift links are bearer: anyone who gets the link — or sees the claim on the network — can sweep it. Share it privately and have the recipient claim right away. (A safer redesign is coming; Spending gifts aren\u2019t affected.)', lnAutopayOffer: 'Auto-pay {name} up to {n} next time', lnPaySentTitle: 'Lightning payment sent', lnPaySentBody: 'The swap provider pays the invoice once the on-chain lockup confirms.', |