Skip to content

Commit

Permalink
Merge pull request #1216 from algorand/add-parallel-networks-notice
Browse files Browse the repository at this point in the history
Added guideline to smart signature use.
  • Loading branch information
nullun authored Dec 7, 2023
2 parents 6d6ba6f + d08d791 commit 534291c
Showing 1 changed file with 3 additions and 1 deletion.
4 changes: 3 additions & 1 deletion docs/get-details/dapps/smart-contracts/guidelines.md
Original file line number Diff line number Diff line change
Expand Up @@ -384,7 +384,9 @@ These guidelines are specific to smart signatures. They complement the other gui
* An attacker can replay a transaction signed by a smart signature (whether in contract account or logic signature mode).
* For example, a delegated logic signature allowing approving any change offline transaction is insecure. The first time it is used, an attacker can replay it many times and empty the account (using all the fees)! The delegated logic signature needs to
* Be careful about the fact that, contrary to arguments of smart contracts, arguments of smart signatures are **NOT** signed by the sender account and are **NOT** part of the computation of the group ID. In other words, an attacker can intercept a transaction signed by a smart signature and change its arguments (as long as it is still accepted by the smart signature).

* Be careful about the fact that the same smart signature can be used in multiple networks.
* For instance, if a smart signature is signed with the intent of using it on TestNet, that same transaction can be sent to MainNet with that same smart signature.
* Always use new accounts when using TestNet (or any other network) to avoid reusing the same account that signed a smart signature.

## Additional resources

Expand Down

0 comments on commit 534291c

Please sign in to comment.