What changed, and why it matters
This tiny patch adds a 'Wait...' loading screen while the COLDCARD wallet switches between Bitcoin networks (for example, mainnet to testnet). The change appears aimed at preventing user confusion or accidental interaction during a brief reconfiguration, not at fixing a serious security flaw. There is no direct evidence in the commit that this resolves an exploit.
Treat as a minor UX/hardening improvement. No urgent security action is indicated by the commit alone. If a security advisory or bug bounty report later ties this screen to a race-condition or social-engineering issue, re-evaluate.
Security signals we found
UI/UX hardening: adding a wait screen to block user input during a settings transition
No cryptographic, authorization, or validation changes present in diff
Evidence from the diff
In shared/actions.py, the change_which_chain() coroutine now imports dis from glob and calls dis.fullscreen(‘Wait…’) before updating the xpub and other settings. This is purely a user-experience change: it displays a full-screen wait message while the device recalculates the extended public key and related state after the active blockchain network has changed. The diff does not alter cryptographic logic, validation, or access control.
Changed components
shared/actions.pychange_which_chain() functionInspect captured patch +2 / −0
diff --git a/shared/actions.py b/shared/actions.py
index 996ae36..35e9aed 100644
--- a/shared/actions.py
+++ b/shared/actions.py
@@ -2366,6 +2366,8 @@ async def change_seed_vault(is_enabled):
async def change_which_chain(*a):
# setting already changed, but reflect that value in other settings
+ from glob import dis
+ dis.fullscreen("Wait...")
try:
# update xpub stored in settings
import stash
Why this scored 19/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.