Currently only transaction outputs are shown to the user, so basically every tx containing a command looks like a simple transfer to the user. This is exploitable by a compromised host, e.g.:
- The user can be tricked into signing a token-related command that they didn't intend to sign.
- FillOrder inputs, which don't require signatures, are exploitable too - the user can be tricked into filling a wrong order, with a bad ask/give ratio.
- Etc.
Currently only transaction outputs are shown to the user, so basically every tx containing a command looks like a simple transfer to the user. This is exploitable by a compromised host, e.g.: