fix: enforce the base58 checksum and reject non-master extended keys (closes #210)

2026-08-11 15:31:50 +02:00
parent fb9e8f5542
commit b155c0fcd6
5 changed files with 238 additions and 30 deletions
--- a/src/popup/index.html
+++ b/src/popup/index.html
@@ -136,7 +136,9 @@
                <div id="add-wallet-section-xprv" class="hidden">
                    <p class="mb-2">
                        Paste your extended private key (xprv) below. This will
-                        import the HD wallet and scan for used addresses.
+                        import the HD wallet and scan for used addresses. It
+                        must be the master key for the wallet; an account-level
+                        or child key is not supported.
                    </p>
                    <div class="mb-2">
                        <input