sneak 0ade35bad2 fix: sign and export with each address's own derivation index (closes #510) ...

Sending, site transactions, site signatures and private key export
derived the key at the address's position in the wallet's list. After
an import whose scan passed over an unused index, or after removing an
address that was not the last, that position named another address's
key.

Each HD and xprv address record now stores the index it was derived at
(at wallet creation, by the import scan, by "+"). getSignerForAddress()
derives at that index, refuses a record without one, and refuses any key
whose address differs from the record's. The confirmation screen signs
as the From address it shows, not the selected one. The export screen
reports a refusal instead of calling the password wrong.

Model: opus-5-5

2026-10-14 13:49:31 +00:00

..

background

fix: eth_sign's warning and the README say what it signs (closes #409)

2026-10-14 15:41:22 +02:00

content

docs: put Sepolia in scope and write down the provider flag exception (closes #165)

2026-10-07 23:58:49 +02:00

popup

fix: sign and export with each address's own derivation index (closes #510)

2026-10-14 13:49:31 +00:00

shared

fix: sign and export with each address's own derivation index (closes #510)

2026-10-14 13:49:31 +00:00