AI-generated analysisPublished automatically and not human-verified. Validated context appears in community notes below.
← Watch feed
Low 32 Monero

show split tx warning on confirm screen

Public commit record

What the developer wrote

Authored by Julian

45/100 · Thin
show split tx warning on confirm screen
✓ Descriptive subject✓ Names a concrete action or component! No meaningful explanatory body
The short version

What changed, and why it matters

This commit updates the Stack Wallet app so that when a single payment is broken into multiple cryptocurrency transactions, the user sees a clear warning on the confirmation screen. It also changes the app's internal record-keeping to handle multiple transaction IDs (txids) instead of assuming there is always just one. The main risk being addressed is that a user might accidentally send a split payment to a vendor or exchange that only credits single-transaction payments, leading to lost or miscredited funds.

Recommended action

No immediate security action is required; this is a defensive UX and data-model improvement. Reviewers should verify that all call sites consuming `TxData.txid` handle the null case safely when multiple txids are present, and that the new `txids` list is never empty after a successful send. Users should update to the version containing this commit to benefit from the split-payment warning.

Security signals we found

01

UI now warns users when a payment will be split into multiple on-chain transactions

02

Internal transaction model changed from single txid to list of txids

03

Multiple confirmation flows updated to iterate over all txids for notes and trade lookups

04

Dependency bump of cs_monero from 3.2.0 to 4.0.0 to support multi-txid pending transactions

05

Generated FFI templates parse semicolon-separated transaction hashes for Salvium and Wownero

Risk score

Why this scored 32/100

Our methodology →
Potential impact 8/30
Exploitability 3/25
Stealth signal 2/15
Affected reach 7/15
Confidence 8/10
Evidence quality 4/5
Human-validated context

Community notes

Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.

No validated notes yet.

The AI analysis stands alone for now. Submit a note if you can add evidence or important context.