test(eip7928): add cross-block precompile state leak test

Author: qu0b

tests/amsterdam/eip7928_block_level_access_lists/test_block_access_lists.py

@@ -2206,3 +2206,80 @@ def test_bal_cross_tx_storage_revert_to_zero(
             contract: Account(storage={0: 0x0}),
         },
     )
+
+
+# RIPEMD-160 precompile address (used in Parity Touch Bug test)
+RIPEMD_160 = Address(0x03)
+
+
+def test_bal_cross_block_precompile_state_leak(
+    pre: Alloc,
+    blockchain_test: BlockchainTestFiller,
+) -> None:
+    """
+    Ensure internal EVM state for precompile handling does not leak between blocks.
+
+    The EVM may track internal state related to the Parity Touch Bug (EIP-161)
+    when calling RIPEMD-160 (0x03) with zero value. If this state is not properly
+    reset between blocks, it can cause incorrect BAL entries in subsequent blocks.
+
+    Prerequisites for triggering the bug:
+    1. RIPEMD-160 (0x03) must already exist in state before the call.
+    2. Block 1 must call RIPEMD-160 with zero value and complete successfully.
+    3. Block 2 must have a TX that triggers an exception (not REVERT).
+
+    Expected behavior:
+    - Block 1: RIPEMD-160 in BAL (legitimate access)
+    - Block 2: RIPEMD-160 NOT in BAL (never touched in this block)
+
+    Bug behavior:
+    - Block 2 incorrectly has RIPEMD-160 in its BAL due to leaked internal state.
+    """
+    alice = pre.fund_eoa()
+    bob = pre.fund_eoa()
+
+    # Pre-fund RIPEMD-160 so it exists before the call.
+    # This is required to trigger the internal state tracking.
+    pre[RIPEMD_160] = Account(balance=1)
+
+    # Contract that calls RIPEMD-160 with zero value
+    ripemd_caller = pre.deploy_contract(
+        code=Op.CALL(50_000, RIPEMD_160, 0, 0, 0, 0, 0) + Op.STOP
+    )
+
+    # Contract that triggers an exception (stack underflow from ADD on empty stack)
+    exception_contract = pre.deploy_contract(code=Op.ADD)
+
+    # Block 1: Call RIPEMD-160 successfully
+    block1 = Block(
+        txs=[
+            Transaction(
+                sender=alice,
+                to=ripemd_caller,
+                gas_limit=100_000,
+            )
+        ],
+    )
+
+    # Block 2: Exception triggers internal exception handling.
+    # If internal state leaked from Block 1, RIPEMD-160 would incorrectly
+    # appear in Block 2's BAL.
+    block2 = Block(
+        txs=[
+            Transaction(
+                sender=bob,
+                to=exception_contract,
+                gas_limit=100_000,
+            )
+        ],
+    )
+
+    blockchain_test(
+        pre=pre,
+        blocks=[block1, block2],
+        post={
+            alice: Account(nonce=1),
+            bob: Account(nonce=1),
+            RIPEMD_160: Account(balance=1),
+        },
+    )

tests/amsterdam/eip7928_block_level_access_lists/test_cases.md

@@ -94,3 +94,4 @@
 | `test_call_to_pre_authorized_oog` | Ensure BAL handles OOG during EIP-7702 delegation access (pre-Amsterdam test with BAL) | Call to delegated account that OOGs before accessing delegation contract | BAL **MUST** include auth_signer (code read for delegation check) but **MUST NOT** include delegation contract (OOG before access) | ✅ Completed |
 | `test_selfdestruct_created_in_same_tx_with_revert` | Ensure BAL tracks selfdestruct with revert correctly (pre-Amsterdam test with BAL) | Contract created and selfdestructed in same tx with nested revert | BAL **MUST** track storage reads and balance changes for selfdestruct even with reverts | ✅ Completed |
 | `test_value_transfer_gas_calculation` | Ensure BAL correctly tracks OOG scenarios for CALL/CALLCODE/DELEGATECALL/STATICCALL (pre-Amsterdam test with BAL) | Nested calls with precise gas limits to test OOG behavior. For CALL with OOG: target account read for `is_account_alive` check. For CALLCODE/DELEGATECALL/STATICCALL with OOG: target account **NOT** read (OOG before state access) | For CALL: target in BAL even with OOG. For CALLCODE/DELEGATECALL/STATICCALL: target **NOT** in BAL when OOG (state access deferred until after gas check) | ✅ Completed |
+| `test_bal_cross_block_precompile_state_leak` | Ensure internal EVM state for precompile handling does not leak between blocks | Block 1: Alice calls RIPEMD-160 (0x03) with zero value (RIPEMD-160 must be pre-funded). Block 2: Bob's transaction triggers an exception (stack underflow). | BAL for Block 1 **MUST** include RIPEMD-160. BAL for Block 2 **MUST NOT** include RIPEMD-160 (never accessed in Block 2). Internal state from Parity Touch Bug (EIP-161) handling must be reset between blocks. | ✅ Completed |