Zy0n/update phase

[zy0n]

This pull request introduces enhanced validation for transactions by adding support for relay and proxy contract checks, decoding transaction data, and validating relay-specific calls. It also updates the createValidTransaction function and its usages to include the chain context. Below is a summary of the most important changes:

Enhancements to transaction validation:

• Added support for validating transactions targeting relay and proxy contracts by introducing checkIsProxyAddress and checkIsRelayAdaptAddress helper functions. These ensure the to address is a known contract.
• Implemented relay-specific validation logic by decoding transaction data using the ABI_RELAY_ADAPT ABI, checking if the call is a relay call, and validating the relay call data.

Updates to createValidTransaction:

• Modified the createValidTransaction function to accept a chain parameter, enabling chain-specific validation for proxy and relay addresses.

Integration with existing functionality:

• Updated transactMethod in src/server/waku-broadcaster/methods/transact-method.ts to pass the chain parameter when calling createValidTransaction. [1] [2]

ABI and imports:

• Added ABI_RELAY_ADAPT to the list of imported ABIs and exported it for use in transaction validation.
• Extended imports from ethers to include Interface, InterfaceAbi, and TransactionDescription for decoding and validating transaction data.

Test updates:

• Updated the test for createValidTransaction in transaction-validator.test.ts to include the new chain parameter in the function call.

[socket-security]

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff	Package	Supply Chain Security	Vulnerability	Quality	Maintenance	License
	@​railgun-community/​shared-models@​7.5.0 ⏵ 8.0.0			-1	+2
	@​railgun-community/​wallet@​10.3.3 ⏵ 10.8.1	+3		+2	+4

View full report

[socket-security]

All alerts resolved. Learn more about Socket for GitHub.

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

View full report