CleverWild 32ceb27d77
Some checks failed
ci/woodpecker/pr/server-audit Pipeline was successful
ci/woodpecker/pr/server-vet Pipeline failed
ci/woodpecker/pr/server-lint Pipeline was successful
ci/woodpecker/pr/server-test Pipeline failed
security(server): use SysRng directly for bootstrap token generation
Replace make_rng()/StdRng with UnwrapErr(SysRng) to eliminate the PRNG
intermediate layer and make OS entropy derivation explicit and unambiguous.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-18 19:30:31 +02:00
2026-03-11 14:05:42 +01:00

Arbiter

Policy-first multi-client wallet daemon, allowing permissioned transactions across blockchains

Security warning

Arbiter can't meaningfully protect against host compromise. Potential attack flow:

  • Attacker steals TLS keys from database
  • Pretends to be server; just accepts operator challenge solutions
  • Pretend to be in sealed state and performing DH with client
  • Steals user password and derives seal key

While this attack is highly targetive, it's still possible.

This software is experimental. Do not use with funds you cannot afford to lose.

Description
No description provided
Readme 8.8 MiB
Languages
Rust 57.7%
Dart 39%
C++ 1.1%
CMake 0.9%
Ruby 0.3%
Other 0.7%