ms32 wallet imports recovered descriptors before showing the recovered wallet identity.
A wrong but checksum-valid seed can therefore mutate the selected empty Bitcoin Core wallet before the operator can detect the mismatch.
Required behavior: derive and verify the independent wallet recovery commitment before any descriptor import. The BIP32 fingerprint may remain diagnostic, but must not authorize restore.
This applies to direct CLI restore and the recovery documentation.
ms32 walletimports recovered descriptors before showing the recovered wallet identity.A wrong but checksum-valid seed can therefore mutate the selected empty Bitcoin Core wallet before the operator can detect the mismatch.
Required behavior: derive and verify the independent wallet recovery commitment before any descriptor import. The BIP32 fingerprint may remain diagnostic, but must not authorize restore.
This applies to direct CLI restore and the recovery documentation.