The Keybase app 2.13.2 for iOS provides potentially insufficient notice that it is employing a users private key to sign a certain cryptocurrency attestation (that an address at keybase.io can be used for Stellar payments to the user), which might be incompatible with a users personal position on the semantics of an attestation.
The product does not verify, or incorrectly verifies, the cryptographic signature for data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Keybase | Keybase | 2.13.2 (including) | 2.13.2 (including) |