Skip to content

fix: Fund migration vote#209

Merged
Aman035 merged 4 commits into
mainfrom
fund-migration-vote-fix
Apr 24, 2026
Merged

fix: Fund migration vote#209
Aman035 merged 4 commits into
mainfrom
fund-migration-vote-fix

Conversation

@Aman035

@Aman035 Aman035 commented Apr 23, 2026

Copy link
Copy Markdown
Member

Fixes #208

@Aman035 Aman035 changed the title Fund migration vote fix fix: Fund migration vote Apr 23, 2026
@Aman035 Aman035 merged commit e9c6867 into main Apr 24, 2026
7 of 8 checks passed
Aman035 added a commit that referenced this pull request May 21, 2026
…st retry storm after peer already migrated funds

* F-2026-16962 | fund migration vote races on balance re-query

Brings PR #209 (pushchain/push-chain-node) onto audit-fixes for audit
review.

The migration sweep amount is computed at signing time from the old
vault's balance, but the broadcast path was re-querying the balance —
racing with another validator's successful sweep would produce a
different sweep amount and a different signed tx hash.

- UnsignedSigningReq: add TSSFundMigrationAmount carried alongside Nonce
  from signing to broadcast (both are signing-time-decided values that
  must reach broadcast unchanged)
- EVM tx_builder: store maxTransfer in the signing request; broadcast
  reuses it verbatim instead of recomputing
- sessionmanager: persist and forward TSSFundMigrationAmount through
  the signing session
- txbroadcaster: pass the stored amount to the broadcast call

* add: tc
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Fund migration tx creation fails when balance changes between sign and broadcast due to concurrent node broadcasting

1 participant