Validate new public key in Account public key setter functions

OpenZeppelin / cairo-contracts

OpenZeppelin Contracts written in Cairo for Starknet, a decentralized ZK Rollup

https://docs.openzeppelin.com/contracts-cairo

MIT License

802 stars 323 forks source link

Validate new public key in Account public key setter functions #818

Closed martriay closed 2 months ago

martriay commented 8 months ago

To minimize the risk of changing the key to a wrong one, there could be an impl in AccountComponent that validates ownership e.g. by requiring a signed message. It might make sense to standardize such message.