teamsempo/SempoBlockchain

Add TFA to superadmin transfer flow

Closed this issue · 1 comments

Is your feature request related to a problem? Please describe.
Platform volume is growing, we need to be conscious of user security holes. For example, a staff member with superadmin privileges leaves their laptop open and a malicious actor disburses all funds or accesses the system private key.

Describe the solution you'd like
TFA on transfers over the default amount or accessing platform private key.

Describe alternatives you've considered

  • re-enter password
  • re-enter TFA
  • email confirmation
  • a combination of the above

Fixed in #687