Skip to content

Verify ISM signer for confirmation signatures#455

Merged
danwt merged 1 commit intomain-dymfrom
danwt/claude/validate-ism-signatures
Jan 27, 2026
Merged

Verify ISM signer for confirmation signatures#455
danwt merged 1 commit intomain-dymfrom
danwt/claude/validate-ism-signatures

Conversation

@danwt
Copy link
Copy Markdown

@danwt danwt commented Jan 27, 2026

Summary

  • Add signature verification for confirmation requests to match deposit behavior
  • Previously, confirmations did not validate that the signature came from the expected ISM address, allowing misconfigured validators to return signatures from wrong keys
  • Extracts common validation logic into a shared verify_ism_signer() helper function for DRY code

Changes

  • Add verify_ism_signer<T: Signable>() helper function that validates signatures against expected ISM addresses
  • Update get_deposit_sigs() to use the shared helper (reduces code duplication)
  • Add signature verification to get_confirmation_sigs() using the same pattern
  • Add SignableProgressIndication::new() constructor for external use
  • Minor formatting fixes from cargo fmt

Test plan

  • Build passes: cargo build -p dymension-kaspa
  • Existing tests pass
  • Manual testing on blumbus testnet with validators

🤖 Generated with Claude Code

@danwt danwt force-pushed the danwt/claude/validate-ism-signatures branch from 439f850 to 58a4b60 Compare January 27, 2026 09:31
Add signature verification for confirmation requests to match deposit
behavior. Previously, confirmations did not validate that the signature
came from the expected ISM address, allowing misconfigured validators
to return signatures from wrong keys.

Changes:
- Add verify_ism_signer() helper for DRY signature validation
- Update get_deposit_sigs() to use the shared helper
- Add signature verification to get_confirmation_sigs()
- Add SignableProgressIndication::new() constructor for external use
- Always validate (ISM addresses are always required for sorting)

Also includes minor formatting fixes from cargo fmt.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
@danwt danwt force-pushed the danwt/claude/validate-ism-signatures branch from 58a4b60 to a32b25b Compare January 27, 2026 09:36
@danwt danwt merged commit 93c690b into main-dym Jan 27, 2026
6 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant