Skip to content

Safety: Validate receive address format matches the selected network before sending #65

@jan3-agent

Description

@jan3-agent

Description

When sending funds via SideShift or Changelly, the agent does not validate that the provided receive address matches the expected network. For example, sending USDt on Ethereum but providing a Solana address would proceed without warning, resulting in permanently lost funds with no recovery path.

Steps to reproduce

  1. Initiate a send through SideShift or Changelly
  2. Specify a destination network (e.g., Ethereum)
  3. Provide a receive address for a different network (e.g., Solana)
  4. Complete the send transaction

Expected vs actual

  • Expected: Agent validates address format against the selected network and warns the user of a mismatch before executing
  • Actual: Transaction proceeds without validation or warning

Scope

  • SideShift send flow
  • Changelly send flow

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions