← Back to methodology index

Foreign co-signer on owner permission

perm-owner-cosigner

Foreign co-signer on owner permission is a Leeri screening rule for TRON that detects the following: A multisig-style owner permission includes one or more keys that do not belong to this address.

What it detects

A multisig-style owner permission includes one or more keys that do not belong to this address.

When it fires

A foreign key sits on the owner permission and contributes weight toward the signing threshold, without being able to meet it alone.

What it means

The account is under shared control: the foreign key cannot act alone, but it takes part in owner-level signing. This is common for corporate and multi-party wallets, and it also means the customer may not control the account on their own.

What to do

Review the co-signing keys and their weights listed with the finding, and confirm with the customer who holds them where account control matters to your relationship.

Chains

Wallet security warning for the address owner · not scored from ruleset v11