MetaMask/snaps-registry

[New Snap] MSQ - Safe ICP Wallet

Closed this issue · 2 comments

Checklist

All items in the list below needs to be satisfied.

  • Is the Snap repository publicly accessible and linked in this ticket? https://github.com/fort-major/msq
  • Is the Snap distributed on npm and linked in this ticket? https://www.npmjs.com/package/@fort-major/msq
  • Has an audit been performed and the audit report attached or linked in this issue? https://consensys.io/diligence/audits/2024/03/msq-snap/
  • Is a complete list of discovered vulnerabilities from the audit documented in this issue?
  • For vulnerabilities that have been deemed necessary to be addressed, are the links to the fixes attached to this issue?
  • For vulnerabilities that have been deemed not necessary to be addressed, is a reason for each of them documented in this issue?
  • The corresponding pull request in this repo has been merged.

Audit Findings:
11 Issues identified and all were fixed.

Version to be allowListed: 0.3.3

OK, we have checked with the auditor and I consider the issue with signing from the companion dapp to be sufficiently mitigated. We should proceed with allowlisting.