AutistMask

wallet view: addresses wrap and break the layout when a wallet has multiple addresses

#380 by clawbot was closed 2026-08-30 05:25:00 +02:00

2

fix: neither manifest declares icons, so both browsers show a generic puzzle piece

#371 by clawbot was closed 2026-08-23 21:26:14 +02:00 1.0.0 0 / 5

harden: a zero input amount lets a later hop's figure be displayed against an earlier hop's Token In

#364 by clawbot was closed 2026-08-23 20:45:58 +02:00 1.0.0 0 / 4

fix: malformed allowedSites and fraudContracts entries are dereferenced without a floor

#362 by clawbot was closed 2026-08-23 23:06:18 +02:00 1.0.0 0 / 4

harden: a V4 step with a zero amountOutMin leaves an earlier hop's Min. received on screen

#359 by clawbot was closed 2026-08-23 20:45:58 +02:00 1.0.0 0 / 5

harden: the input side has the same null-means-ETH collapse — an undetermined inputToken is asserted as "ETH (native)"

#357 by clawbot was closed 2026-08-23 20:23:05 +02:00 1.0.0 0 / 5

harden: a V4 swap with an undetermined output token is asserted to the user as ETH at 18 decimals

#353 by clawbot was closed 2026-08-23 18:13:21 +02:00 1.0.0 0 / 5

fix: balances.js fabricates decimals 18 before storage, laundering a guess into both approval paths

#349 by clawbot was closed 2026-08-23 21:19:05 +02:00 1.0.0 0 / 5

1

fix: a swap to a token absent from the bundled list shows no Token Out line at all

#346 by clawbot was closed 2026-08-23 16:31:03 +02:00 1.0.0 0 / 3

harden: the swap approval screen guesses 18 decimals for any token not in the bundled list

#340 by clawbot was closed 2026-08-23 17:58:13 +02:00 1.0.0 0 / 4

build: a failed release build leaves the complete INSECURE debug bundle loadable in dist/

#333 by clawbot was closed 2026-08-23 15:39:04 +02:00 1.0.0 0 / 4

1

docs: README claims verify-build covers "nothing the build did not write", which is broader than what is enforced

#331 by clawbot was closed 2026-08-23 15:33:59 +02:00 1.0.0 0 / 4

harden: the background must stop reading the shared state singleton — one root cause, five sites, and the fixes keep adding new ones

#324 by clawbot was closed 2026-08-23 17:57:31 +02:00 1.0.0 0 / 7

2

fix: a nonzero approval amount still renders as 0.0000 when it is smaller than the 4-decimal display floor

#322 by clawbot was closed 2026-08-23 15:43:04 +02:00 1.0.0 0 / 5

fix: a cold worker prepares a dApp transaction for the wrong chain, so every non-mainnet dApp send is refused

#320 by clawbot was closed 2026-08-23 17:57:31 +02:00 1.0.0 0 / 5

fix: a cold worker answers eth_chainId and net_version from never-loaded state, reporting mainnet to a page whose user is on Sepolia

#317 by clawbot was closed 2026-08-20 13:11:49 +02:00 1.0.0 0 / 4

2

fix: the background worker saves state it never loaded, so a chain switch wipes every wallet in storage

#316 by clawbot was closed 2026-08-20 12:42:14 +02:00 1.0.0 0 / 5

1

fix: a forgotten password permanently wedges the wallet — cannot delete it, cannot re-import the phrase

#312 by clawbot was closed 2026-08-20 15:12:29 +02:00 1.0.0 0 / 5

2

fix: stored state has no version and no migration, and a corrupt blob bricks the popup and every dApp call

#311 by clawbot was closed 2026-08-23 20:04:01 +02:00 1.0.0 0 / 7

2

release: there is no packaging, no artifact and no signing — the extension cannot be installed durably on either browser

#310 by clawbot was closed 2026-08-23 16:13:23 +02:00 1.0.0 0 / 7

1