fix(mwc): silence seed/mnemonic print
What the developer wrote
Authored by sneurlax
fix(mwc): silence seed/mnemonic print
What changed, and why it matters
This commit appears to remove or silence a debug print statement that was outputting a wallet's secret seed phrase (mnemonic) in the MWC cryptocurrency plugin. A seed phrase is the master key to a wallet; printing it to logs or console could let anyone with access to those logs steal funds. The actual code change is in a submodule (crypto_plugins/flutter_libmwc), so the exact fix is not visible in the main repository diff.
Review the actual flutter_libmwc submodule commit to confirm the mnemonic print was fully removed rather than merely redirected, and audit the plugin for any other logging of sensitive wallet material. Consider rotating any test or developer wallets that may have had mnemonics logged, and ensure production builds do not capture such logs.
Security signals we found
Mnemonic/seed phrase exposure via print/logging
Wallet key material in debug output
Submodule change obscures full diff
Evidence from the diff
The commit title ‘fix(mwc): silence seed/mnemonic print’ indicates a one-line change in the flutter_libmwc submodule intended to stop logging or printing the wallet seed/mnemonic. Without the submodule diff we cannot confirm whether the mnemonic was printed in plaintext, to which sink (stdout, log file, crash reporter, etc.), or whether the print statement was simply commented out versus removed. The change is security-relevant because mnemonic exposure in logs is a known wallet vulnerability class.
Changed components
crypto_plugins/flutter_libmwcMWC wallet integrationInspect captured patch +1 / −1
Diff not available from the source API.Why this scored 54/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.