AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 42 Bitcoin

always rebuild the send transaction when a human readable name is pasted over the pay to address

Public commit record

What the developer wrote

Authored by Craig Raw

50/100 · Thin
always rebuild the send transaction when a human readable name is pasted over the pay to address
✓ Specific, descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
The short version

What changed, and why it matters

This commit fixes a bug in Sparrow Wallet's 'Send' screen. Previously, if you pasted a human-readable payment name (like a DNS payment alias) over an already-filled recipient address, the wallet sometimes kept the old transaction details instead of rebuilding it for the new name. The change ensures the transaction is always recalculated after a name is pasted, so the wallet doesn't accidentally prepare a payment to the wrong recipient while the name is still resolving.

Recommended action

Treat as a low-to-moderate reliability fix. Review related recipient-change handlers to ensure no other early-return paths skip transaction rebuilds. No immediate emergency response is warranted unless user reports of wrong-address transactions surface.

Security signals we found

01

UI state desynchronization between displayed recipient and constructed transaction

02

Early return bypassing transaction rebuild after recipient field change

03

Human-readable name resolution race/caching could leave stale recipient in unsigned transaction

04

No explicit cryptographic bug; risk is user confusion or wrong-address payment

Risk score

Why this scored 42/100

Our methodology →
Potential impact 12/30
Exploitability 8/25
Stealth signal 7/15
Affected reach 6/15
Confidence 6/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.