Issues

• [Low] Hardening notes: unlock password held as string; seed-verify picks use Random.Shared

  enhancement
  dboudreau00/Xault-Wallet#11 · Filter by author dboudreau00 opened on Oct 6, 2026

• [Low] Seed import without wallet-rpc skips derived-address confirmation

  bug
  dboudreau00/Xault-Wallet#10 · Filter by author dboudreau00 opened on Oct 6, 2026

• [Low] Cancelled sweep swallows relay error even if tx may have broadcast

  bug
  dboudreau00/Xault-Wallet#9 · Filter by author dboudreau00 opened on Oct 6, 2026

• [Low] Private view key copy lands in clipboard history; not cleared on lock/exit

  bug
  dboudreau00/Xault-Wallet#8 · Filter by author dboudreau00 opened on Oct 6, 2026

• [Low] Release workflow permissions too broad; pin actions by SHA; add NuGet lock files

  enhancement
  dboudreau00/Xault-Wallet#7 · Filter by author dboudreau00 opened on Oct 6, 2026

• [Medium] .NET 8 end of support 2026-11-10; upgrade to .NET 10 LTS (M4)

  enhancement
  dboudreau00/Xault-Wallet#6 · Filter by author dboudreau00 opened on Oct 6, 2026

• [Medium] macOS lacks loopback port-ownership check (M3)

  bug
  dboudreau00/Xault-Wallet#5 · Filter by author dboudreau00 opened on Oct 6, 2026

• [Medium] Installer accepts stale signed release list (downgrade) (M2)

  bug
  dboudreau00/Xault-Wallet#4 · Filter by author dboudreau00 opened on Oct 6, 2026

• [Medium] Remote node presets use plain HTTP; TLS not enforced (M1)

  bug
  dboudreau00/Xault-Wallet#3 · Filter by author dboudreau00 opened on Oct 6, 2026

• [High] Decoy seed backup default filename reveals duress wallet (H1)

  bug
  dboudreau00/Xault-Wallet#2 · Filter by author dboudreau00 opened on Oct 6, 2026