pow-co / boostpow-api

**With Boost Server Your Apps Cut Straight To the Signal That Bitcoin Values** - full index of all boosted content - apps and services access the blockchain without need for a node - your miners can manage and submit their proof of work to the network - your apps can easily buy proof of work
https://pow.co/api
6 stars 8 forks source link

fix: Fix trusted situation #95

Closed GaeaKat closed 1 year ago

DanielKrawisz commented 1 year ago

There was a problem with the API call https://pow.co/api#/work/postApiV1BoostProofs

This API call allowed fake boosts to be entered into the database.

This call was set to operate in "trusted mode" which meant that it did not try to broadcast the tx that was given to it to check if it is valid. The function behind this call was used by bsv_spv to enter txs into the database. Trusted mode has been removed and bsv_spv has been set to call an internal function that is not connected to the API.

This pr does not fix all the invalid entries that are currently in the database.