Skip to content

Conversation

@beer-1
Copy link

@beer-1 beer-1 commented Nov 3, 2025

Summary of Changes

  • Allow usage with the latest Initiad release
  • Update dependency to the latest initia.js
  • Fix to correctly pass local decimal values when creating MoveOFTAdapter on Initia
    • In many cases, tokens on Initia have 0 decimals because the IBC transfer module does not support transmitting decimal metadata

@St0rmBr3w St0rmBr3w requested a review from shankars99 November 8, 2025 01:15
@socket-security
Copy link

socket-security bot commented Nov 15, 2025

Review the following changes in direct dependencies. Learn more about Socket for GitHub.

Diff Package Supply Chain
Security
Vulnerability Quality Maintenance License
Updatednpm/​rimraf@​6.0.1 ⏵ 6.1.099 +110010085100

View full report

@cursor
Copy link

cursor bot commented Jan 15, 2026

PR Summary

Enables compatibility with the latest Initia toolchain and improves OFT Adapter initialization behavior.

  • Extend oft_adapter_fa::initialize to accept local_decimals: Option<u8> and default to FA metadata; update tests accordingly
  • Update Move SDK (IOFT, aptosOFT, initiaOFT, oft) and CLI/task (initOFTAdapterFA) to pass optional localDecimals and serialize Initia option<u8>
  • Bump @initia/initia.js to ^1.0.0; remove Initiad version checks and use initiad directly in build/deploy tasks
  • Example changes: switch EVM networks to bsc-testnet; adjust move.layerzero.config.ts (use BSC EIDs, confirmations 10/2, executor gas limits 5k, message sizes); add EVM deploy gasLimit; add deploy-move/OFTAdapterInitParams.ts with localDecimals
  • README updates (simplified initiad keys add, deployment script name, command arg fixes) and add deployments/ to .gitignore
  • Lockfile/dependency updates (e.g., glob, rimraf)

Written by Cursor Bugbot for commit 733f484. This will update automatically on new commits. Configure here.

msgType: MsgType.SEND_AND_CALL,
optionType: ExecutorOptionType.LZ_RECEIVE,
gas: 300_000, // gas limit in wei for EndpointV2.lzCompose
gas: 5_000, // gas limit in wei for EndpointV2.lzCompose
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Gas limit too low for cross-chain message execution

High Severity

The gas limit for LZ_RECEIVE operations on messages from BSC to Initia has been reduced from 300_000 to 5_000. A gas limit of 5,000 is extremely low and likely insufficient for cross-chain token receive operations, which typically involve storage writes and token transfers. This could cause lzReceive calls to fail on the Initia destination chain due to out-of-gas errors, resulting in stuck or failed cross-chain transfers.

Additional Locations (1)

Fix in Cursor Fix in Web

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant