Gabriel Montes

So the wallet will refuse connections if i.e. the domain is hijacked.

And plug in to sign. Proposed by @jgarzik.

Outdated dependencies should be updated

2

* `secp256k1` is configured to 3.5.0 which is the latest version. However the underlying libsecp256k1 is commit 84973d3 after which there are 64 commits. * `browserify-aes` is configured to 1.1.1....

All incoming txs have to be stored in the wallet's db right upon being received as "to be processed". Then the txs shall be parsed. If all goes ok, after...

Or start anyway and allow the user to be in "offline" mode.

As of 0.7, wallet uses both enode endpoints but settings only allow the user to change the ws one.

The onboarding need to be split in 1) user password setup and 2) main wallet creation. That will allow better management of the password, including validation of strongness on both...

Check old/deprecated/vulnerable dependencies

1

List of old/deprecated/vulnerable deps: - [email protected] - [email protected] - [email protected] - [email protected] Audit item 2.1.3

The objective is to detect if the settigns file was externally manipulated and prevent further operations. Check if electron-setting has some get/set hooks to encrypt the file. Audit item 2.1.1

Through configuration options, it shall be possible to start the indexer for the first time at any block instead of defaulting to the genesis block. Subsequent restarts shall resume the...