ton-core / ton-crypto

TON Crypto Primitives for NodeJS/Browser/React Native

💎 ton-core

🚨 Repository Deprecated and Moved! 🚨

This repository has been deprecated and is no longer actively maintained. We have moved our project to a new repository, which you can find here: ton-org/ton-core. The new NPM package is available here: @ton/core

Please make sure to update your bookmarks and star the new repository to stay up-to-date with the latest developments and updates. This repository will be archived and eventually removed.

Thank you for your continued support!

---

Core library that implements low level primitives of TON blockchain.

How to install

yarn add ton-core

Reference Documentation

Documentation

Acknowledgements

This library is developed by the Whales Corp. and maintained by Dan Volkov.

License

MIT

ton-crypto's Issues

mnemonicToWalletKey() does not report mnemonics with typos

Consider these two snippets:

const mnemonic = "priority road check curious obvious ...";
const key = await mnemonicToWalletKey(mnemonic.split(" "));
const wallet = WalletContractV4.create({ publicKey: key.publicKey, workchain: 0 });

const mnemonic = "priority road check curious abvious ..."; // obvious has a typo = abvious
const key = await mnemonicToWalletKey(mnemonic.split(" "));
const wallet = WalletContractV4.create({ publicKey: key.publicKey, workchain: 0 });

They both pass smoothly and return different wallet addresses.

This is very dangerous. Consider that somebody has a mnemonic and the code that creates a wallet in software has a typo. He would end up reaching a different address by mistake. Send it funds. If this code is ever deleted and they try to recover the wallet from the written mnemonic, they will not make the same typo again, and the money will be lost.

Wanted behavior - Throw an error from mnemonicToWalletKey on any problem with the mnemonic (not enough words, too many words, words not in the dictionary, checksum of mnemonic doesn't add up).