8 Commits

Include renames

Author	SHA1	Message	Date
clawbot	918e581ef3	harden: verify the signed transaction against what the popup displayed (closes #216) ... Verification compared the signed artifact against the dApp's request object. For every field the dApp omitted -- normally nonce, gas limit and all the fee fields, since the popup filled them in -- the number the user actually read on screen was verified by nothing, and only absolute ceilings stood behind it. The transaction is now populated in the background before the approval window opens, and that populated object is both what the popup displays and what the signed artifact is verified against. Every consequential field becomes an equality comparison; the ceilings remain as a backstop. Population failing means no approval and no window, and the error goes to the requesting page -- earlier than before, where the same estimate failed after the password had been typed. The account is pinned too: `from` is compared against the address named at approval time rather than whichever address is active at signing, so switching accounts mid-flow refuses instead of signing from an account the approval did not name. The message-signing path had the same defect and gets the same fix. Nonce selection moves earlier as a consequence; the concurrent-approval case that follows from it is tracked at #271.	2026-08-12 12:15:25 +02:00
clawbot	ba35282092	docs: describe the bundled token list by its criterion, not a drifting count (closes #239)	2026-08-12 10:20:40 +02:00
clawbot	158278d251	fix: count the network fee in the confirm-screen balance check (closes #154)	2026-08-11 15:41:37 +02:00
clawbot	6f6bc2e7b5	fix: drive background refresh and phishing update from alarms (closes #158)	2026-08-11 15:38:28 +02:00
clawbot	74c137dadf	fix: add a Settings toggle for known-symbol spoof verification (closes #176)	2026-08-11 15:38:05 +02:00
clawbot	edea22f7ed	fix: move the UTC Timestamps checkbox into the Display well (closes #212)	2026-08-11 15:34:16 +02:00
clawbot	19cb1ca1b0	docs: correct docs/README.md external services and remove competitor names (closes #163)	2026-08-11 14:25:57 +02:00
sneak	75cbbea035	Add user-facing documentation in docs/README.md ... Covers rationale, hard guidelines (always/never), external service details (RPC, Blockscout, CoinDesk APIs with what data is sent), encryption model, installation, wallet management, sending/receiving, web3 site connections, scam protection, settings, and FAQ. Written for a technical cryptocurrency user who is not a programmer.	2026-02-27 12:08:43 +07:00