Skip to content

node: sign bridge vote-extensions via checkpoint/attestation RPCs#1034

Open
diorwave wants to merge 6 commits into
tellor-io:mainfrom
cryptoriums:feat/validated-bridge-signing
Open

node: sign bridge vote-extensions via checkpoint/attestation RPCs#1034
diorwave wants to merge 6 commits into
tellor-io:mainfrom
cryptoriums:feat/validated-bridge-signing

Conversation

@diorwave

Copy link
Copy Markdown
Contributor
  • Validator no longer signs bridge vote-extensions with blind SignRaw.
  • With a remote signer: valset checkpoint → SignBridgeCheckpoint, oracle attestations →
    SignOracleAttestation; node asserts the returned 64-byte sig equals the expected value.
  • Fail-safe: bad node data → signer rejects → missed signing (recoverable jail), never a wrong sig.
  • Local file-keyring path unchanged.

@krasi-georgiev

Copy link
Copy Markdown
Contributor

The reason for this pr is to protect the signer from unauthorised tx. With blind sign someone with access to the layer server can steal the funds.

…alidated-bridge-signing

# Conflicts:
#	go.mod
#	go.sum
@diorwave diorwave force-pushed the feat/validated-bridge-signing branch from efe5983 to 324cc32 Compare June 12, 2026 18:17
@diorwave

Copy link
Copy Markdown
Contributor Author

right, node now signs via checkpoint/attestation rpcs, so blind SignRaw can be dropped and a compromised layer server cant steal funds.

@akremstudy akremstudy self-requested a review June 19, 2026 12:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants