Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

HAL-05 Highlight possible fund dividends scenario with fake account #42

Merged
merged 1 commit into from
Dec 4, 2024
Merged

HAL-05 Highlight possible fund dividends scenario with fake account #42

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -963,12 +963,20 @@ sequenceDiagram

1. Amount of entitled dividend token is transferred from the `Dividends` PDA to the rightful recipient.

## Security implication
**Please note:** *Anyone can create a Security Token* with related Access Control data and a Distributor.

However, **someone might attempt to deceive the issuer** into funding dividends into fake accounts, which could result in **a loss of funds**.

Therefore, the issuer must use **a trusted service** to fund dividends or validate Security Token address inside instruction to mitigate this risk.

## Relevant Methods

### New Distribution Creation Code

A new distribution can be created with a call to the Solana program like this.


**Solana Web3 TS call:**
```typescript
await program.methods
Expand Down
Loading