search

keep-network / keep-core

The smart contracts and reference client behind the Keep network
https://keep.network
MIT License
118 stars 73 forks source link

SPV maintainer: Add coinbase data to submitted SPV proofs #3762

Closed lukasz-zimnoch closed 7 months ago

lukasz-zimnoch commented 7 months ago

Refs: https://github.com/keep-network/tbtc-v2/security/advisories/GHSA-wg2x-rv86-mmpx

The SPV proof verifier used by the Bridge contract has been changed. It now expects the coinbase's preimage and merkle proof to be submitted as part of the proven transaction's SPV proof. Here we adhere to this requirement by adjusting the SPV maintainer accordingly.