Review Monero cold-signing change before releasing a signature
A view-only wallet can prepare an unsigned transfer for a separate signing machine. The transaction set can contain multiple transactions, recipients and change amounts.
Inspect the actual signing payload
Send the set produced by the view-only wallet to the wallet that will review it. Replace the sample value with the complete encoded unsigned_txset. Read each entry in the returned desc list. POST this example to /json_rpc on monero-wallet-rpc.
{
"jsonrpc": "2.0",
"id": "guide",
"method": "describe_transfer",
"params": {
"unsigned_txset": "<unsigned transaction set>"
}
}
Match change as well as destinations
For every entry compare recipient addresses and atomic amounts with the approved instruction, check fees and identify the change address and amount. A matching grand total can conceal a changed destination. Description reads the proposal without signing or broadcasting it, so authorization remains a separate action.