yannickmodahgouez commented 2 months ago

Describe the bug Not a bug but I was victim of an address poisoning / dusting attack and I think this could have been mitigated by a simple UI fix

Here is what happened :

sent a test amount of sol to my ledger, transaction went through
went to send a good amount of SOL to my ledger, copied the address from the previous transaction, checked the address, start and end of address were OK.
didn't receive the SOL to my ledger, checked the address again it was the wrong address... Turns out a SOL account with the same start and end as my ledger address was created and transactions to this wallet were injected in my history.

To Reproduce

Do exactly what I did while talking on the phone so you only have 20% of your brain available for transferring assets.

Expected behavior

My suggestion would be to change the green check icon on the left of each Transfer to an "incoming" or "outgoing" icon. Users would be more suspicious of an incoming transaction and wouldnt copy and address from it. This is a very low hanging fruit that could save tons of tokens of SOLs.

Donations welcome to make back my SOLs 🤣 : 25Tdv6UamFdVA7shbuGdCTCzAev1nsPVCKK4coYDVLTB

Smartphone (please complete the following information): Happened on latest version of iOS wallet

yannickmodahgouez commented 2 months ago

Can't edit the label but definitely not a bug

yannickmodahgouez commented 2 months ago

Thanks guys, at least I know I did not lose my SOLs for nothing 👏🏾 @ChewingGlass @jthiller

helium / wallet-app

Improvement proposal to mitigate address poisoning attacks #738

Do exactly what I did while talking on the phone so you only have 20% of your brain available for transferring assets.