AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Informational 24 Monero

fix(shopinbit): fix ShopInbit USDT payments

Public commit record

What the developer wrote

Authored by sneurlax

57/100 · Thin
fix(shopinbit): fix ShopInbit USDT payments

and various mobile ui fixes
✓ Descriptive subject✓ Names a concrete action or component✓ Uses a recognizable type or scope! No meaningful explanatory body
The short version

What changed, and why it matters

This commit fixes the ShopInBit payment feature so it can correctly pay with USDT (an Ethereum token) instead of only supporting Bitcoin and Monero. It also adds a 'check for payment' button when the user has no compatible wallet, and makes several UI labels and navigation fixes. There is no clear security vulnerability in the diff; it is a feature/bug-fix patch.

Recommended action

Review the hardcoded USDT contract address and ensure it matches the intended network (Ethereum mainnet). Verify that Wallet.loadTokenWallet and prepareSend/confirmSend handle ERC-20 token transfers and gas/fee accounting correctly. Test the new payment-status polling and navigation flows on both mobile and desktop.

Security signals we found

01

Hardcoded USDT contract address (0xdac17f958d2ee523a2206206994597c13d831ec7) used for token detection

02

Address type fallback to AddressType.ethereum when token wallet cannot classify the recipient address

03

Manual payment-status polling with user-facing flushbar messages

04

Navigation/pop fixes that could affect UI state consistency

Risk score

Why this scored 24/100

Our methodology →
Potential impact 5/30
Exploitability 3/25
Stealth signal 2/15
Affected reach 5/15
Confidence 6/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.