210 похожих чатов

Once i change my keys, how can an old multisig

do anything?

10 ответов

31 просмотр

Msig doesn’t check keys on execution

Luka-Perrrcic Автор вопроса
Luka Perrrcic
oh damn, bug

Contracts have no access to keys anyways

Luka-Perrrcic Автор вопроса
Syed
Contracts have no access to keys anyways

still, no good, msig beeing able to bypass all permissions causes this

Syed
Contracts have no access to keys anyways

Is there a way to see if a MSIG was conducted on an account?

Luka Perrrcic
still, no good, msig beeing able to bypass all per...

I don’t get the point, if I changed owner and active private key, why does they still have power to touch account?

Luka-Perrrcic Автор вопроса
墙外督查 EOS中文 | EOSCN
I don’t get the point, if I changed owner and acti...

Ok lets say you start with alice key A, then alice proposes key change to key B in the msig contract. But she does not execute the proposal, just leaves it hanging, so account still has A key. Well then alice gives the account to Bob (by giving him private key A) Now bob doesn't know there is a proposal in msig waiting. Bob changes the key from A to C (his new fresh keys) and loads some crypto. Now alice sees that, and executes the waiting msig. Msig is privileged, was legit when signed, but now isnt anymore... it still goes through, and gives her the keys to the account.

Похожие вопросы

Обсуждают сегодня

Карта сайта