CleverWild 4e11c27129 security(server): use SysRng directly for bootstrap token generation
Replace make_rng()/StdRng with UnwrapErr(SysRng) to eliminate the PRNG
intermediate layer and make OS entropy derivation explicit and unambiguous.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-08-26 13:01:44 +02:00
2026-03-11 14:05:42 +01:00

Arbiter

Policy-first multi-client wallet daemon, allowing permissioned transactions across blockchains

Security warning

Arbiter can't meaningfully protect against host compromise. Potential attack flow:

  • Attacker steals TLS keys from database
  • Pretends to be server; just accepts operator challenge solutions
  • Pretend to be in sealed state and performing DH with client
  • Steals user password and derives seal key

While this attack is highly targetive, it's still possible.

This software is experimental. Do not use with funds you cannot afford to lose.

Description
No description provided
Readme 12 MiB
Languages
Rust 57.8%
Dart 39%
C++ 1.1%
CMake 0.9%
Ruby 0.3%
Other 0.6%