From c0eef2fe9b92aa3412ecf0a5f50eab79ae62e12f Mon Sep 17 00:00:00 2001
From: Leo <leo@certus.one>
Date: Thu, 21 Jan 2021 00:25:38 +0100
Subject: [PATCH] adminGuardianSetUpdateToVAA: check for duplicate guardian
 keys

Sanity check.
---
 bridge/cmd/guardiand/adminserver.go | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/bridge/cmd/guardiand/adminserver.go b/bridge/cmd/guardiand/adminserver.go
index b0c8035cd..a164b7f3c 100644
--- a/bridge/cmd/guardiand/adminserver.go
+++ b/bridge/cmd/guardiand/adminserver.go
@@ -44,7 +44,14 @@ func adminGuardianSetUpdateToVAA(req *nodev1.GuardianSetUpdate, guardianSetIndex
 			return nil, fmt.Errorf("invalid pubkey format at index %d (%s)", i, g.Name)
 		}
 
-		addrs[i] = ethcommon.HexToAddress(g.Pubkey)
+		ethAddr := ethcommon.HexToAddress(g.Pubkey)
+		for j, pk := range addrs {
+			if pk == ethAddr {
+				return nil, fmt.Errorf("duplicate pubkey at index %d (duplicate of %d): %s", i, j, g.Name)
+			}
+		}
+
+		addrs[i] = ethAddr
 	}
 
 	v := &vaa.VAA{