feat(sdk-coin-dot): enhance tx verification for consolidation to base address

Ticket: WP-5728

Author: danielpeng1

modules/sdk-coin-dot/src/dot.ts

@@ -651,7 +651,7 @@ export class Dot extends BaseCoin {
   }
 
   async verifyTransaction(params: VerifyTransactionOptions): Promise<boolean> {
-    const { txPrebuild, txParams } = params;
+    const { txPrebuild, txParams, verification, wallet } = params;
     if (!txParams) {
       throw new Error('missing txParams');
     }
@@ -664,13 +664,27 @@ export class Dot extends BaseCoin {
       throw new Error('missing txHex in txPrebuild');
     }
 
+    const factory = this.getBuilder();
+    const txBuilder = factory.from(txPrebuild.txHex) as any;
+
+    if (verification?.consolidationToBaseAddress) {
+      // Verify funds are sent to wallet's base address for consolidation
+      const baseAddress = wallet?.coinSpecific()?.baseAddress || wallet?.coinSpecific()?.rootAddress;
+      if (!baseAddress) {
+        throw new Error('Unable to determine base address for consolidation');
+      }
+      if (txBuilder._to !== baseAddress) {
+        throw new Error(
+          `Transaction destination address ${txBuilder._to} does not match wallet base address ${baseAddress}`
+        );
+      }
+      return true;
+    }
+
     if (!txParams.recipients || txParams.recipients.length === 0) {
       throw new Error('missing recipients in txParams');
     }
 
-    const factory = this.getBuilder();
-    const txBuilder = factory.from(txPrebuild.txHex) as any;
-
     if (Array.isArray(txParams.recipients) && txParams.recipients.length > 1) {
       throw new Error(
         `${this.getChain()} doesn't support sending to more than 1 destination address within a single transaction. Try again, using only a single recipient.`

modules/sdk-coin-dot/test/unit/dot.ts

@@ -727,6 +727,53 @@ describe('DOT:', function () {
       const result = await basecoin.verifyTransaction({ txPrebuild, txParams });
       assert.strictEqual(result, true);
     });
+
+    it('should verify a valid consolidation transaction', async function () {
+      const mockedWallet = {
+        coinSpecific: () => ({
+          baseAddress: '5CZh773vKGwKFCYUjGc31AwXCbf7TPkavdeuk2XoujJMjbBD',
+        }),
+      };
+      const txPrebuild = {
+        txHex:
+          '0xa80a0300161b969b6b53ef81225feea3882284c778cd4a406d23215fcf492e83f75d42960b00204aa9d101eb600400000065900f001000000067f9723393ef76214df0118c34bbbd3dbebc8ed46a10973a8c969d48fe7598c9a7b7420ee3e4fe2b88da0fc42b30897e18d56d8b56a1934211d9de730cf96de300',
+      };
+
+      const result = await basecoin.verifyTransaction({
+        txPrebuild,
+        txParams: {},
+        wallet: mockedWallet as any,
+        verification: {
+          consolidationToBaseAddress: true,
+        },
+      });
+      assert.strictEqual(result, true);
+    });
+
+    it('should reject a consolidation transaction with invalid destination address', async function () {
+      const mockedWallet = {
+        coinSpecific: () => ({
+          baseAddress: '5DxD9nT16GQLrU6aB5pSS5VtxoZbVju3NHUCcawxZyZCTf74',
+        }),
+      };
+      const txPrebuild = {
+        txHex:
+          '0xa80a0300161b969b6b53ef81225feea3882284c778cd4a406d23215fcf492e83f75d42960b00204aa9d101eb600400000065900f001000000067f9723393ef76214df0118c34bbbd3dbebc8ed46a10973a8c969d48fe7598c9a7b7420ee3e4fe2b88da0fc42b30897e18d56d8b56a1934211d9de730cf96de300',
+      };
+
+      await basecoin
+        .verifyTransaction({
+          txPrebuild,
+          txParams: {},
+          wallet: mockedWallet as any,
+          verification: {
+            consolidationToBaseAddress: true,
+          },
+        })
+        .should.be.rejectedWith(
+          'Transaction destination address 5CZh773vKGwKFCYUjGc31AwXCbf7TPkavdeuk2XoujJMjbBD does not match wallet base address 5DxD9nT16GQLrU6aB5pSS5VtxoZbVju3NHUCcawxZyZCTf74'
+        );
+    });
   });
 
   describe('isWalletAddress', () => {