vang1ong7ang

oracle service vulnerability: local information leak

2

the following way of avoiding local access is not enough: https://github.com/neo-project/neo-modules/blob/32aacc468ad43600817daabbec834e715017d962/src/OracleService/Protocols/OracleHttpsProtocol.cs#L41-L46 since a remote server is able to return a redirect response whose target is . > original issue

discussion about block time

11

this is not an urgent problem, but it is easy to fix without introducing forks. 1. any malicious consensus node is able to propose its block earlier (any time from...

fix: account/network switch

2

fix the account (or network) switch bug: when `activeIndex` ( or`chainId`) is `0` the variable `newActiveIndex` (or `newChainId`) is not set properly

drop the dependency of `System.Security.Cryptography`

6

in the discussion of #3220 it is tried to explore the possibility of moving to BouncyCastle for performance reasons, many prefer keeping `System.Security.Cryptography` instead of moving to BouncyCastle however, I...

the hardfork coding style is introduced because it's necessary for neo to ensure the safety when upgrading (see #2910 and #3233) but it's not a good solution in my opinion...