Closed dforsten closed 2 months ago
Already fixed with the newest commit on the "threshold-crypto" repo, but it is not labeled as a new version. The "hbbft" crate needs to be patched to use that newest commit instead.
The "fedmint" project maintains private forks of hbbft/threshold-crypto as well, we may want to do the same: https://github.com/fedimint
I implemented the necessary changes, creating a PR to the poanetwork/hbbft repo. In the meantime the changes are available on my private fork at: https://github.com/dforsten/hbbft
PR for the poanetwork hbbft repo submitted here: https://github.com/poanetwork/hbbft/pull/441
solved: there is no critical issue anymore
Critical issue reported by dependabot.