Skip to content

Commit

Permalink
Merge pull request #729 from Chia-Network/2024-12-18_cloud_wallet
Browse files Browse the repository at this point in the history
Update Cloud Wallet docs list of current bugs
  • Loading branch information
BrandtH22 authored Dec 19, 2024
2 parents 756c37a + 62b5116 commit f25417e
Show file tree
Hide file tree
Showing 3 changed files with 16 additions and 14 deletions.
12 changes: 6 additions & 6 deletions docs/getting-started/cloud-wallet/faq.md
Original file line number Diff line number Diff line change
Expand Up @@ -72,7 +72,7 @@ In the reference wallet, the key used for signing transactions is located on the

We plan to release three tiers with the Cloud Wallet:

- Free Tier – currently available, albeit in beta form. It includes one vault, with a single custody key and a single recovery key. The free tier will provide easy onboarding for new users, and will offer a more secure solution than what exists in most of the industry.
- Free Tier – currently available, albeit in beta form. It includes one vault, with a single key for spending and a single key for recovery. The free tier will provide easy onboarding for new users, and will offer a more secure solution than what exists in most of the industry.
- Prosumer Tier (coming soon) – will include support for multisig vaults, as well as some advanced trading tools. This will be the perfect solution for individuals and small groups who want to share custody, as well as for high-frequency traders. It will be available for a monthly fee.
- Enterprise Tier (coming soon) – will provide custody, management, and support solutions for large enterprises.

Expand All @@ -92,19 +92,19 @@ If you discover any security issues, you can file a report on our [bug bounty si

## Recovery

### What happens if I lose my custody key?
### What happens if I lose my spend key?

You can use your recovery key to swap out the lost key for a new one.

### What happens if my custody key is stolen? Will all of my funds be stolen?
### What happens if my spend key is stolen? Will all of my funds be stolen?

It depends. For example, the Chia Signer app recommends using biometric authentication such as a fingerprint or face ID. With this setup, if a thief steals your phone, they will not be able to access the Chia Signer app, and thus your funds will remain secure. You can procure a new smartphone and initiate the recovery process in order to restore your funds.

However, the current setup is not secure against wrench attacks, where the thief forces you to use your biometrics to sign a transaction to steal all of your funds. Our upcoming multisig solution will be secure against such attacks, as will our longer-term custody solution.

### What happens if I lose my recovery key?

You can use your custody key to send your funds to a new vault.
You can use your spend key to send your funds to a new vault.

### What happens if my recovery key is stolen? Will all of my funds be stolen?

Expand All @@ -128,7 +128,7 @@ Yes! The Chia blockchain is a public ledger, so anyone can build software to mon

### What is the Chia Signer app?

The Chia Signer app turns your smartphone into a hardware wallet. The app uses your phone's Secure Enclave to create a vault custody key. This key cannot be removed from the device, so a thief would need to gain physical access to your phone in order to steal it. You can download it from the [iOS App Store](https://apps.apple.com/app/chia-signer/id6504493785).
The Chia Signer app turns your smartphone into a hardware wallet. The app uses your phone's Secure Enclave to create a vault spend key. This key cannot be removed from the device, so a thief would need to gain physical access to your phone in order to steal it. You can download it from the [iOS App Store](https://apps.apple.com/app/chia-signer/id6504493785).

:::info

Expand Down Expand Up @@ -179,7 +179,7 @@ No. CNI won't custody any of your assets, so it won't have the ability to freeze

### What risks do end users take regarding CNI's control of the Cloud Wallet website?

One of the advantages of using vaults is that their custody keys are not directly accessible to the website or its APIs.
One of the advantages of using vaults is that their spend keys are not directly accessible to the website or its APIs.

The two risks for Cloud Wallet end users are:

Expand Down
14 changes: 8 additions & 6 deletions docs/getting-started/cloud-wallet/known-issues.md
Original file line number Diff line number Diff line change
Expand Up @@ -3,34 +3,36 @@ slug: /getting-started/cloud-wallet/known-issues
title: Known Issues
---

This list was last updated on 2024-12-09. Although there are many items in this list, most of them are minor issues or issues that occur rarely. In addition, while we will attempt to keep this list up to date, it may fall behind on occasion. This is not meant to be a comprehensive list.
This list was last updated on 2024-12-18. Although there are many items in this list, most of them are minor issues or issues that occur rarely. In addition, while we will attempt to keep this list up to date, it may fall behind on occasion. This is not meant to be a comprehensive list.

- Recovery is not yet enabled for vaults that use the Chia Signer app
- The fee field doesn’t work yet for recovery operations (initiate, cancel, complete)
- The fiat price of XCH is currently not being displayed
- You may see an occasional `Minified React error` when doing various actions in the Cloud Wallet
- You may have difficulty creating a new Yubikey passkey when using the Cloud Wallet on Android
- If vault creation fails, you won't be able to create a vault with the same name used with the failed attempt
- If you send two transactions within the same block, the second transaction will be stuck in the mempool indefinitely
- Transaction status might not be updated for around 20 seconds after on-chain confirmation
- When vault minting doesn't succeed (for example, if not enough coins are available), the action is not retried
- Long vault names are truncated; this is a display issue only
- Vaults currently can be named with all whitespace (space/tab) characters; this will be disallowed in the future
- The Chia Signer app is only for signing transactions; the current signup process doesn't make it completely clear that the app cannot be used for logging into the Cloud Wallet. We will make this clearer in the future.
- The transaction history may not show all incoming transactions, even when the balance is accurate
- The error message that appears when you enter an invalid Send address is not very descriptive
- When setting up a vault on an iPhone, the fields for inputting up the clawback timer might not show any numbers
- If you attempt to add a passkey, but then click the X to close out of the window, it will give you an error
- If you send funds to your own vault, the transaction will show an amount of 0
- In rare occurrences, when creating an account, you might see "Internal Server Error"
- You may see "User not found for this passkey" when attempting to create an account with a passkey
- We are in the process of updating the mobile UI, so certain buttons and labels may look bad on a mobile device for now
- Some users have reported seeing "vault.chiatest.net's DNS address could not be found...." when using the Brave browser
- Upon cancelling a recovery, an extra signature dialog is displayed
- You may receive two identical copies of the same watchtower email upon successfully completing a recovery
- The previous view of the home screen will briefly flash after a new vault is created; this lasts less than one second until the correct view is displayed
- After successfully cancelling a recovery, you may see a "Something went wrong" message; refresh your browser window to workaround this issue
- The initial timer displayed for cancelling a recovery is hardcoded to 15 minutes; however, the actual timer is correct
- You might receive two copies of the same email upon successfully completing a recovery
- The recovery timer will show "0 minutes" remaining when, in fact, there is less than one minute remaining; this is a simple rounding error which will be resolved when the timer actually reaches 0
- After a successful recovery, the first transaction in the vault’s history shows an extra mojo
- The signing modal dialog occasionally takes over 30 seconds to be displayed
- When sending CATs, the "amount" field is missing a label, and the "fee" field is labeled as "unknown CATs"; these are display issues only
- CATs sent to the same vault as where they originated are listed as "0 Unknown CATS"
- An unsigned spend will get `Settled` Status when the next spend succeeds and is settled
- If the Cloud Wallet is left inactive for a long time, "Something went wrong" might be displayed; refreshing the browser tab will work around this issue
- For now, in order to paste a seed phrase when initiating a recovery, you must paste the phrase into the first word field
- Coins might be locked if certain transactions fail, and it’s not obvious how to unlock them; however, this is an uncommon occurrence
Expand Down
4 changes: 2 additions & 2 deletions docs/getting-started/cloud-wallet/tooltips.md
Original file line number Diff line number Diff line change
Expand Up @@ -10,9 +10,9 @@ This page contains tooltip links from the Cloud Wallet. It provides some basic i

## Recovery

This is the process of rekeying a vault. If your custody key is lost or stolen, you can swap it out for a new one. For example, if someone steals your smartphone where your Chia Signer app is installed, you can obtain a new phone, install the Chia Signer app, and create a new hardware key. You can then instruct your vault to replace the stolen key with the new one. The recovery process also allows you to change your recovery key if desired.
This is the process of rekeying a vault. If your spend key is lost or stolen, you can swap it out for a new one. For example, if someone steals your smartphone where your Chia Signer app is installed, you can obtain a new phone, install the Chia Signer app, and create a new hardware key. You can then instruct your vault to replace the stolen key with the new one. The recovery process also allows you to change your recovery key if desired.

## Custody Key
## Spend Key

This is a vault’s primary key used for signing transactions. It can be either a passkey or a hardware key from the Chia Signer app.

Expand Down

0 comments on commit f25417e

Please sign in to comment.