fix(core): quorum pledge/unpledge correctness — TOCTOU races, token scoping, and unpledge invariant#651

Open

gklps wants to merge 16 commits intorubixchain:release-v1from

gklps:fix/rbt-transfer-e2e-v2

Commits on Apr 8, 2026

fix(wallet): eliminate TOCTOU race in LockTokensForSplit
gklps
committed
fix(pledge): eliminate TOCTOU race in PledgeV2 with SELECT FOR UPDATE
gklps
committed
chore(logging): comment out high-volume pub-sub Info logs in TxnCallBack
gklps
committed
fix(quorum): repair quorum pledge flow (3 minimal fixes)
gklps
committed
fix(wallet): enforce reference_id scoping on token release paths
gklps
committed
fix(wallet): cursor-based batching in lockTokensForSplitOnce + rows.Err() check
gklps
committed
fix(quorum): soft dedup guard + lock_reference_id validation before PledgeV2 (VULN-4)
gklps
committed
fix(wallet): scope ReleaseTokens by lock_reference_id to prevent cross-request token release (VULN-5)
gklps
committed
feat(core): add lock_reference_id tracing + random retry backoff for high-contention txns
gklps
committed
feat(wallet): add GetFreeRBTBalanceByDID helper for liquidity pre-check
gklps
committed
feat(core): add liquidity pre-check guard in requestPledgeTokenHandler
gklps
committed
fix(core): add referenceID parameter to PledgeV2 and update SELECT FOR UPDATE query
gklps
committed
feat(core): add unpledge audit-log fields to Core struct + writeUnpledgeMismatch helper
gklps
committed
fix(core): add quorum_did ownership filter to CheckTxnsPresentInUnpledgeSequenceInfo
gklps
committed
fix(core): enforce quorum ownership + chain-progress guards in UnpledgeV2
gklps
committed
fix(core): enhance error message and add referenceID filter in PledgeV2 token update
gklps
committed