diff options
| author | Adam Soltys <[email protected]> | 2026-06-24 13:38:08 -0700 |
|---|---|---|
| committer | Adam Soltys <[email protected]> | 2026-06-24 13:38:08 -0700 |
| commit | 7234a3de9e200f36accb754f62163f0bd5360832 (patch) | |
| tree | f30b492cd8938503512a2f565a7d4a9b396afff1 /static | |
| parent | ffb5c30b54f913746cd6f9f79166cc4d0842dc78 (diff) | |
| download | coinosv3-7234a3de9e200f36accb754f62163f0bd5360832.tar.gz coinosv3-7234a3de9e200f36accb754f62163f0bd5360832.zip | |
Replace seed gift links with presigned PSBT claim links
Gifting no longer shares a seed. "Gift some Bitcoin" (Settings) presigns
a chosen amount as a #gift= link: one SIGHASH_SINGLE input (the sender's
change output is cryptographically fixed, so a front-runner can only take
the gift portion, never the change) plus the rest left open. The coin is
reserved per-wallet so normal sends skip it; reclaim it anytime.
Opening the link generates a brand-new wallet the sender never sees,
shows the amount, and on Claim adds the claimer's address as the output,
finalizes, and broadcasts — then prompts backup of the fresh seed. This
gives forward secrecy (sender locked out once confirmed), one-shot
semantics (claiming spends the input), and keeps funds in the sender's
wallet until claimed.
Crypto verified end-to-end (sign NONE/SINGLE -> add output -> finalize ->
valid tx; deterministic-signature equality proves the presigned sig is
valid for any output the claimer picks). Strings retranslated across all
19 locales.
Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>
Diffstat (limited to 'static')
0 files changed, 0 insertions, 0 deletions