JoshOrndorff / utxo-workshop

A Substrate UTXO workshop
The Unlicense
117 stars 81 forks source link

Fix missing input bug #75

Closed JoshOrndorff closed 4 years ago

JoshOrndorff commented 4 years ago

This PR fixes the issue that the runtime accepts transactions that consume bogus inputs.

While the transaction pool was able successfully filter those transactions, the tx pool cannot be relied on because it is offchain logic. An attacker could program their node to accept these transactions, and the runtime must still be able to defent itself in this case.