Monero: Authenticated `unsigned_txset` change spoof lets a malicious hot wallet steal cold-signer change

A vulnerability was discovered in Monero's wallet code that allowed a malicious or compromised hot/watch-only wallet with the victim wallet's private view key to forge an authenticated unsigned transaction. The forged transaction included an attacker-controlled output that was presented as change...