build1 publisher
A hostile repo's .env could make BagOS's login tool sign a wallet drain
BagOS 3.0.0 stops reading .env from the working directory after a review found a repo's config could make its login tool sign a wallet drain. Its preview-and-confirm gate covered write tools only, and login was never classed as one.
Publishers:dev.to
Reality
- Evidence55
- Adoption
- Insufficient
- Hype gap0
- Incentives55
- Confidence60