WIP : Add arc20 tokens

CHANGELOG.md

@@ -5,6 +5,22 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [1.3.3] - 2026-09-01
+
+### Added
+
+- ARC20 tokens support: ETH, SOL, WBTC and USDT
+- ARC20 tokens batch private transfer support
+- Logic to forbid test/temporary programs on mainnet
+- Unit tests, Ragger tests and swap tests for ARC20 tokens and batch transfers
+
+### Fixed
+
+- ARC20 batch transfer parsing out-of-band issue
+- Out-of-bounds issue with `network_id`
+- Unit tests after rebasing
+- Ruff format issues and some CodeQL findings
+
 ## [1.3.1] - 2026-09-01
 
 ### Fixed

Makefile

@@ -30,7 +30,7 @@ APPNAME = "Aleo"
 # Application version
 APPVERSION_M = 1
 APPVERSION_N = 3
-APPVERSION_P = 1
+APPVERSION_P = 3
 APPVERSION = "$(APPVERSION_M).$(APPVERSION_N).$(APPVERSION_P)"
 
 # Application source files

fuzzing/CMakeLists.txt

@@ -47,6 +47,7 @@ target_include_directories(
          ${APP_SRC}/transaction
          ${APP_SRC}/ui
          ${APP_SRC}/ui/action
+         ${APP_SRC}/swap
          ${MSGPACK_SRC}
 )
 

src/account/account.c

@@ -32,9 +32,6 @@
 
 #include "account.h"
 
-/*#define HASH_INPUT_MAX_LENGTH (8)
-
-static field_t hash_input[HASH_INPUT_MAX_LENGTH];*/
 static char text_buffer[32];
 
 const field_t ACCOUNT_SK_SIG_DOMAIN = {
@@ -100,7 +97,6 @@ static int get_seed(const uint32_t *path, uint8_t path_len, field_t *seed)
 
 static int private_key_from_seed(const field_t *seed, scalar_t *sk_sig, scalar_t *r_sig)
 {
-    //_Static_assert(HASH_INPUT_MAX_LENGTH >= 4, "hash_input size won't fit");
     int     status = -1;
     field_t hash_input[4];
 
@@ -158,7 +154,6 @@ static int view_key_from_private_and_compute_key(const private_key_t *private_ke
                                                  compute_key_t       *compute_key,
                                                  scalar_t            *view_key)
 {
-    //_Static_assert(HASH_INPUT_MAX_LENGTH >= 6, "hash_input size won't fit");
     int     status = -1;
     field_t hash_input[6];
 
@@ -197,7 +192,6 @@ static int address_from_view_key(const scalar_t *view_key, group_t *address)
 
 static int graph_key_from_view_key(const scalar_t *view_key, field_t *graph_key)
 {
-    //_Static_assert(HASH_INPUT_MAX_LENGTH >= 7, "hash_input size won't fit");
     int     status = -1;
     field_t hash_input[7];
     field_t f_view_key;
@@ -439,7 +433,6 @@ int r_list_set(account_t *account, uint8_t index)
         r = &G_context.r_list.array[index];
 
         // Compute a `r0` as `hash_to_scalar_psd4(domain || sk_sig || nonce)`
-        //_Static_assert(HASH_INPUT_MAX_LENGTH >= 7, "hash_input size won't fit");
         memset(hash_input, 0, sizeof(hash_input));
         memcpy(&hash_input[4], &LEDGER_APP_ALEO_DOMAIN, sizeof(field_t));
         scalar_to_field(&account->private_key.sk_sig, &hash_input[5]);
@@ -471,7 +464,6 @@ int r_list_set(account_t *account, uint8_t index)
         }
 
         // Compute a `rx` as `hash_to_scalar_psd4(domain || sk_sig || nonce || index)`
-        //_Static_assert(HASH_INPUT_MAX_LENGTH >= 8, "hash_input size won't fit");
         memset(hash_input, 0, sizeof(hash_input));
         memcpy(&hash_input[4], &LEDGER_APP_ALEO_DOMAIN, sizeof(field_t));
         scalar_to_field(&account->private_key.sk_sig, &hash_input[5]);

src/account/signature.c

@@ -96,6 +96,10 @@ static int plaintext_to_field(uint8_t       *plaintext,
                 PRINTF("PLAINTEXT_TYPE_LITERAL_U128\n");
                 bit_size = 128;
                 break;
+            case PLAINTEXT_TYPE_LITERAL_IDENTIFIER:
+                PRINTF("PLAINTEXT_TYPE_LITERAL_IDENTIFIER\n");
+                bit_size = PLAINTEXT_TYPE_LITERAL_IDENTIFER_VALUE_LENGTH * 8;
+                break;
             default:
                 return -1;
                 break;
@@ -443,6 +447,10 @@ static int prepare_inputs(account_t *account, prepared_request_t *request)
                 status = hash_external_record_input(request, input_index);
                 break;
 
+            case INPUT_ID_DYNAMIC_RECORD:
+                status = hash_external_record_input(request, input_index);
+                break;
+
             default:
                 status = -1;
                 break;