@kristovatlas said:

For example, if an attacker can patch a victim’s HD wallet client to order inputs
and outputs based on the bits of a master private key

Dunno if that's Kristov's idea, but it's brilliant 👍

BTW, @UdjinM6 , where can I add those tags to my pull-requests?

@crowning-

@UdjinM6 : not for me, seems to be a repository-permission feature:

Dunno if that's Kristov's idea, but it's brilliant 👍

IIRC credit for this observation goes to @SergioDemianLerner