do anything?
Msig doesn’t check keys on execution
oh damn, bug
Contracts have no access to keys anyways
still, no good, msig beeing able to bypass all permissions causes this
Is there a way to see if a MSIG was conducted on an account?
Nothing stops the horse
is it trojan? 😉
I don’t get the point, if I changed owner and active private key, why does they still have power to touch account?
Ok lets say you start with alice key A, then alice proposes key change to key B in the msig contract. But she does not execute the proposal, just leaves it hanging, so account still has A key. Well then alice gives the account to Bob (by giving him private key A) Now bob doesn't know there is a proposal in msig waiting. Bob changes the key from A to C (his new fresh keys) and loads some crypto. Now alice sees that, and executes the waiting msig. Msig is privileged, was legit when signed, but now isnt anymore... it still goes through, and gives her the keys to the account.
Обсуждают сегодня