XRPL-Labs/Xaman-Issue-Tracker

[Bug] MultiSign transaction should not sign with regular key, always use account master even if disabled.

Opened this issue · 0 comments

When signing a MultiSign transaction with an account that has a regular key set with or without the master key disabled, Xaman allows to sign with the regular key.

However with MultiSign transactions this should not be possible.

Solution:
If the payload is of type multisign do not take into account regular key or masterkey disabled.Always use Master key, if the master key is not present throw an error that the account cannot sign.