qubic / wallet

official web wallet
https://wallet.qubic.org
Other
3 stars 7 forks source link

Public address is not validated when adding a new watch only address #63

Closed sallymoc closed 2 months ago

sallymoc commented 2 months ago

The public address is composed by 60 characters, from where 56 chars is the public address + 4 are the checksum. When adding a new watch-only address, the app is not validating the checksum. So, basically I can enter the same public address with a different (invalid) checksum many times.

Validation can be done with the following method:

return await new QubicHelper().verifyIdentity(this.identity)