View Issue Details

IDProjectCategoryView StatusLast Update
0008832Talerlibeufin (general)public2024-07-26 00:11
ReporterFlorian Dold Assigned ToAntoine A  
PriorityurgentSeverityblockReproducibilityhave not tried
Status closedResolutionfixed 
Target Version0.12Fixed in Version0.12 
Summary0008832: conversion logic sometimes bounces a transaction via nexus *and* credits libeufin-bank.
DescriptionObviously disastrous, as it allows users to duplicate their money.

It only seems to happen *sometimes*. In particular, it happened for an instant transaction that was made before we enabled ICT support on the EBICS account.

One possible (completely unconfirmed) explanation might be that we see the same transaction twice, but for some reason one time we bounce it and one time we credit the conversion account?!

More information communicated privately, as the relevant data contains PII.
TagsNo tags attached.

Activities

Antoine A

2024-05-31 04:02

developer   ~0022494

Fixed in ce31d171834bcf493ab39f41db64ad1961b610c5 using a temporary fix

The problem identified is not a conversion logic bug. What's happening is that the EBICS implementation was flawed, announcing the same transaction with different TxId's in different files, causing libeufin-nexus to register twice. The first time the transaction was accepted, the second time it was bounced due to the reuse of reserve public keys

Issue History

Date Modified Username Field Change
2024-05-13 12:12 Florian Dold New Issue
2024-05-13 12:12 Florian Dold Status new => assigned
2024-05-13 12:12 Florian Dold Assigned To => Antoine A
2024-05-13 21:22 Christian Grothoff Target Version 0.11 => 0.12
2024-05-31 04:02 Antoine A Status assigned => resolved
2024-05-31 04:02 Antoine A Resolution open => fixed
2024-05-31 04:02 Antoine A Note Added: 0022494
2024-07-26 00:11 Christian Grothoff Fixed in Version => 0.12
2024-07-26 00:11 Christian Grothoff Status resolved => closed