The Aptos watcher will drop messages with a nonce greater than `math.MaxUint32`

[djb15]

Description

The Aptos core bridge contract uses 64 bit nonces, but the Guardian only supports 32 bit nonces in a message publication. The Aptos watcher currently drops any messages where the nonce is greater than math.MaxUint32, which means that if a user or integrator on Aptos published a message with a sufficiently large nonce, they would never get a VAA.

Recommendation

Any Aptos users or integrators trying to send messages via the Wormhole core contract with a custom nonce should ensure that the nonce is a valid uint32 (i.e. it does not exceed math.MaxUint32).

Thanks to Marco for reporting this behaviour.