AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 46 Monero

mweb custom fee fix

Public commit record

What the developer wrote

Authored by Julian

28/100 · Opaque
mweb custom fee fix
✓ Subject identifies a change! No meaningful explanatory body
The short version

What changed, and why it matters

This commit fixes how custom transaction fees are calculated for MWEB (a privacy feature in Litecoin) in Stack Wallet. Previously, when a user set a custom fee in 'satoshis per virtual byte' (sats/vByte), the app sometimes used the wrong fee rate or mixed up per-byte and per-kilobyte units. The fix makes the code consistently convert sats/vByte to a per-kilobyte rate before sending it to the MWEB library. A new test confirms that a custom sats/vByte setting now overrides the default per-kilobyte rate. This is a correctness bug that could cause users to overpay or underpay fees, and underpayment could potentially delay or stall transactions.

Recommended action

Review the full MWEB fee path to ensure no other locations mix sats/vByte and sats/kB units, and confirm the new ceiling-division formula matches the wallet's documented fee behavior. Consider adding tests for edge cases such as very low custom fees and large MWEB peg-in transactions.

Security signals we found

01

Fee-rate unit confusion between sats/vByte and sats/kB

02

Potential transaction fee underpayment leading to stuck transactions

03

Potential fee overpayment causing user financial loss

04

Floating-point arithmetic replaced with integer/BigInt math for fee calculation

05

MWEB privacy transaction fee path affected

Risk score

Why this scored 46/100

Our methodology →
Potential impact 12/30
Exploitability 8/25
Stealth signal 7/15
Affected reach 10/15
Confidence 6/10
Evidence quality 3/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.