test: extra test for token enablement spoofed data

TICKET: WP-5744

Author: mtexeira-simtlix

modules/sdk-coin-sol/test/fixtures/sol.ts

@@ -1019,6 +1019,108 @@ export const wrwUser = {
 };
 
 export const enableTokenFixtures = {
+  sendTokenEnablementPayload: {
+    enableTokens: [{ name: 'tsol:ray', address: 'Gg8Y2TYjUiW4MdUJU3qR3CTDKG8izuKYpXobDj3uzi1y' }],
+    walletPassphrase: 'test-password',
+    apiVersion: 'full',
+    prebuildTx: {
+      walletId: '68bafee43eb5cd22aca2afd6b13ec7ad',
+      wallet: {
+        id: '68bafee43eb5cd22aca2afd6b13ec7ad',
+        users: [{ user: '65f9c6797236825d1b4e1f82a1035b46', permissions: ['admin', 'spend', 'view'] }],
+        coin: 'tsol',
+        label: 'SOL BLIND SIGNING',
+        m: 2,
+        n: 3,
+        keys: [
+          '68bafed588671cf94ed8a5dbba882ad3',
+          '68bafed52d6d95694cf596c2a153868b',
+          '68bafed42d6d95694cf5956ed640853a',
+        ],
+        keySignatures: {},
+        enterprise: '66632c6b42b03d265a939048beaaee55',
+        organization: '66632c6d42b03d265a939107d2f586e5',
+        bitgoOrg: 'BitGo Trust',
+        tags: ['68bafee43eb5cd22aca2afd6b13ec7ad', '66632c6b42b03d265a939048beaaee55'],
+        disableTransactionNotifications: false,
+        freeze: {},
+        deleted: false,
+        approvalsRequired: 1,
+        isCold: false,
+        coinSpecific: {
+          rootAddress: 'Gg8Y2TYjUiW4MdUJU3qR3CTDKG8izuKYpXobDj3uzi1y',
+          pendingChainInitialization: false,
+          minimumFunding: 2447136,
+          lastChainIndex: { 0: 1, 1: -1 },
+          nonceExpiresAt: '2025-09-05T12:54:16.219Z',
+          trustedTokens: [
+            { token: 'tsol:gari', state: 'active' },
+            { token: 'tsol:gmt', state: 'active' },
+            { token: 'tsol:orca', state: 'active' },
+          ],
+        },
+        admin: {
+          policy: {
+            date: '2025-09-05T15:16:52.376Z',
+            id: '68bafee43eb5cd22aca2afd9e699a3ac',
+            label: 'default',
+            rules: [],
+            version: 0,
+            latest: true,
+          },
+        },
+        clientFlags: [],
+        walletFlags: [],
+        allowBackupKeySigning: false,
+        recoverable: true,
+        startDate: '2025-09-05T15:16:52.000Z',
+        type: 'hot',
+        buildDefaults: {},
+        customChangeKeySignatures: {},
+        hasLargeNumberOfAddresses: false,
+        multisigType: 'tss',
+        hasReceiveTransferPolicy: false,
+        creator: '65f9c6797236825d1b4e1f82a1035b46',
+        walletFullyCreated: true,
+        config: {},
+        balanceString: '997865920',
+        confirmedBalanceString: '997865920',
+        spendableBalanceString: '985212384',
+        reservedBalanceString: '2447136',
+        receiveAddress: {
+          id: '68bafee43eb5cd22aca2afe431d4272b',
+          address: 'Gg8Y2TYjUiW4MdUJU3qR3CTDKG8izuKYpXobDj3uzi1y',
+          chain: 0,
+          index: 0,
+          coin: 'tsol',
+          wallet: '68bafee43eb5cd22aca2afd6b13ec7ad',
+          lastConsolidatedTime: '2025-09-08T20:27:43.026Z',
+          needsConsolidation: true,
+          coinSpecific: {
+            rootAddress: 'Gg8Y2TYjUiW4MdUJU3qR3CTDKG8izuKYpXobDj3uzi1y',
+            minimumFunding: 2447136,
+            type: 'native',
+            pendingChainInitialization: false,
+            trustedTokens: [
+              { token: 'tsol:gari', state: 'active' },
+              { token: 'tsol:gmt', state: 'active' },
+              { token: 'tsol:orca', state: 'active' },
+            ],
+          },
+        },
+        pendingApprovals: [],
+      },
+      txRequestId: 'ba2387ac-3634-47c9-9e68-b303ba3b68ca',
+      txHex:
+        '0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000449d051689c3b00fbc5469c657df5b6cb933ac474d0413d01b9649927d5efdca0609bbe6ec994303447d0a637bbd66f2bb547cc2821c6a28cad6debd2daf070b0201060ae8e579a7198c71ee38b3ba2ee56af88cb16995a8f0bf46ab2a3702603cb732e41c96172044f1217c3784e8f02f49e2c8fc3591e81294ab54394f9d22fd7b7a8fa0fb8945a3d63fcacb1a209b094f9a829623548631f0afe5a8ed85d94b634512dc83aad01404ee1a3d70813d21e8923ad1d10354802dc3fbfade3d1c4f9547ce000000000000000000000000000000000000000000000000000000000000000081f74cefd3fb844f62ca7ed6f1418b3f86faf0886647d980259bf0aafbe77b6c8c97258f4e2489f1bb3d1029148e0d830b5a1399daff1084048e7bd8dbe9f85906a7d517192c568ee08a845f73d29788cf035c3145b21ab344d8062ea940000006a7d517192c5c51218cc94c3d4af17f58daee089ba1fd44e3dbd98a0000000006ddf6e1d765a193d9cbe146ceeb79ac1cb485ed5f5b37913a8cf5857eff00a93507d1bc739b13daf71ce8000f751dc08956ab0dd441d7fbf7c7666f9e0560ad020403020701040400000006070003000504090800',
+      buildParams: {
+        apiVersion: 'full',
+        enableTokens: [{ name: 'tsol:ray', address: 'Gg8Y2TYjUiW4MdUJU3qR3CTDKG8izuKYpXobDj3uzi1y' }],
+        type: 'enabletoken',
+      },
+      feeInfo: { fee: 2049280, feeString: '2049280' },
+    },
+  },
   txParams: {
     apiVersion: 'full',
     enableTokens: [

modules/sdk-coin-sol/test/unit/sol.ts

@@ -15,6 +15,7 @@ import {
   MPCSweepTxs,
   MPCTx,
   MPCTxs,
+  PrebuildAndSignTransactionOptions,
   TransactionPrebuild,
   TssUtils,
   TxRequest,
@@ -3334,5 +3335,22 @@ describe('SOL:', function () {
         }
       );
     });
+
+    it('should fail sendTokenEnablement call on spoofed data', async function () {
+      const { sendTokenEnablementPayload, walletData, wrongTokenNameTxHex } = testData.enableTokenFixtures;
+      const wallet = new Wallet(bitgo, basecoin, walletData);
+      nock('https://bitgo.fakeurl').get('/api/v2/tsol/key/68bafed588671cf94ed8a5dbba882ad3').reply(200, {});
+      await assert.rejects(
+        async () =>
+          wallet.sendTokenEnablement({
+            verification: { verifyTokenEnablement: true },
+            ...sendTokenEnablementPayload,
+            prebuildTx: { ...sendTokenEnablementPayload.prebuildTx, txHex: wrongTokenNameTxHex },
+          } as unknown as PrebuildAndSignTransactionOptions),
+        {
+          message: 'Invalid token name: expected tsol:ray, got tsol:t22mint on token enablement tx',
+        }
+      );
+    });
   });
 });