Protocol 27 introduces SOROBAN_CREDENTIALS_ADDRESS_V2 which closes a cross-account replay attack vector by binding the signature payload to the signer's address.
Actions:
- Update
wallet.ts signTransaction flow to use V2 credentials where supported
- The old type remains valid until Protocol 28 — this is not urgent but should be done before Protocol 28
Reference: https://github.com/stellar/stellar-protocol/blob/master/core/cap-0071-02.md
Protocol 27 introduces
SOROBAN_CREDENTIALS_ADDRESS_V2which closes a cross-account replay attack vector by binding the signature payload to the signer's address.Actions:
wallet.tssignTransaction flow to use V2 credentials where supportedReference: https://github.com/stellar/stellar-protocol/blob/master/core/cap-0071-02.md