This program requires complete access to your wallet.
If the "flaw" requires full control of the wallet, then wtf is the point?
It doesn't mean that it has to be sender's wallet. Any wallet will suffice. It seems that the program is using RPC API to get info about transactions.
Stop the blatant FUD. That's the whole "algorithm" of the moron who is trying to influence the market price:
foreach (Vout vout in vouts)
{
// addresses sometimes don't exists in vout JSON returned from client, we just ignore this case
if (vout.address != null)
{
if (coinsReceived.ContainsKey(vout.address))
{
coinsReceived[vout.address] = coinsReceived[vout.address] + vout.amount;
}
else
coinsReceived[vout.address] = vout.amount;
}
}
foreach (string addr in coinsReceived.Keys)
{
decimal c = coinsReceived[addr];
if (c >= receivedAmount && c <= receivedAmount + 0.0003M)
{
return addr;
}
}
As anyone can see, there is absolutely no logic, it's just a piece of shit, probably copy & paste from some M$ost department...
Yes, I can't see how this will have any effect on XC. Multipath obscures the amount sent and so using block height is no way to identify the sender.