Skip to content

CRITICAL BUG : CSV() condition blocks transactions from the account

When a CSV() condition is active for an unlock, Cesium refuses to send transactions, even if the account has other sources free for this amount.

Ex. Account X has 1000 Ğ1, in which 100 are blocked by a CSV() condition. It cannot send 500Ğ1 because the sources include the blocked input, even if it has 900 Ğ1 of input free.

This in a vector of attack, as one could make an account unusable with Cesium by sending it an output with CSV() condition. I guess it has the same comportment with other unlock conditions.

Short-term solution

As Silkaj, choose only sources with SIG(pubkey) as only unlocker

** Long-term solution**

Change the algorithm for choosing sources to discard the locked sources

To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information