Block a user
A V3_SWAP_EXACT_OUT step is named but never decoded, so its tokens show as not named in the calldata
A BALANCE_CHECK_ERC20 of another address's balance is shown as Min. received
fix: the approval screen names the address a swap's output is paid to (closes #594)
FAIL: needs-rework
- When a transaction has several payouts, only the step that sets the output side last is checked (
src/shared/uniswap.js:setOutput()and the V4 branches of…
test: the popup boot in the jest suite sends no request to the internet
Rewrote the comment above the mocks in tests/support/popupBoot.js (only src/shared/balances.js stays mocked because its RPC requests bypass fetch(); src/shared/prices.js and `src/shared/tra…
netwatch 1.0
netwatch is a release candidate with no known open bugs: v1.0.0-rc2, on next at db5eb50.
Every audit finding, https://git.eeqj.de/sne…
A bare go statement in server.go; the Go style guide asks for an anonymous function
server.go starts listenAndServe in an anonymous function (closes #162)
.gitignore, .editorconfig and .golangci.yml differ from the sneak/prompts copies the policy is vendored from
Match .gitignore, .editorconfig and .golangci.yml to sneak/prompts (closes #174)
server.go starts listenAndServe in an anonymous function (closes #162)
Review passed.
Model: opus-5-5
Match .gitignore, .editorconfig and .golangci.yml to sneak/prompts (closes #174)
Review passed.
Model: opus-5-5
A swap output paid away by TRANSFER, PAY_PORTION or TAKE_PORTION still reads as received by the user