Account control delegated to a foreign key
perm-owner-delegated
Account control delegated to a foreign key is a Leeri screening rule for TRON that detects the following: The owner permission is configured so a key outside this address can fully control the account.
What it detects
The owner permission is configured so a key outside this address can fully control the account.
When it fires
The TRON owner permission's signing threshold can be met by foreign keys alone, without any key belonging to this address.
What it means
Whoever holds the foreign key can sign any transaction for this account, so the party you are screening may not be the only one able to move its funds. It can be a deliberate setup, such as a wallet the owner moved under another key, or the configuration an attacker leaves behind after taking an account over. It is reported as a warning for the address owner, not as evidence about where the funds came from.
What to do
Check the permission and the foreign keys listed with the finding, and ask the customer who controls them. Weigh the answer under your own policy.
Chains
- TRON
Ruleset version:
Wallet security warning for the address owner · not scored from ruleset v11