跳到主要内容
ArcBlock Community

Missing Cooldown / Rate Limit on Phone Number Update

JM “cryptotestnet” Morales
开发者
discuss-kitdocswont-fix

Screenshot_2025-11-02-16-22-04-446_com.android.chrome-edit.jpg

Screenshot_2025-11-02-16-22-04-446_com.android.chrome-edit.jpg

The user profile settings allow the user to change and save the phone number field repeatedly and rapidly without any cooldown or rate-limiting mechanism. This lack of control can be exploited for spamming the system or performing unauthorized/rapid updates, which is a security and reliability risk.

1 条回复

Shuang Liu10个月前

This feature isn’t planned for now due to other priorities.

回复