leapdao / leap-contracts

LeapDAO's implementation of More Viable Plasma / Plasma Leap
https://leapdao.org
Mozilla Public License 2.0
45 stars 18 forks source link

enable half-assed spending condition exits #219

Closed johannbarbie closed 5 years ago

johannbarbie commented 5 years ago

Bounty

<- [in]-transfer-tx-[out] <- [in]-spendingCondition-tx-[out]

given a spending condition that spends a transfer transaction, the following simple attack can be used:

  1. start an exit of UTXO of transfer transaction.
  2. challenges with spending condition transaction are not possible. => any-one can doublespend funds by sending them into spending conditions, the back out, and exiting 2 times.

to circumvent this attack, exits should be challengeable also by spending condition transaction, no matter if they can be verified by SolEVM or not, as long as the inclusion proof is correct.

Scope

Deliverables

Gain for the project

Roles

bounty gardener: @johannbarbie / 10% bounty worker: @johannbarbie / 60% bounty reviewer: name / 30%