[entropy] audit: 7. Entropy providers may reveal seed before request is finalized (#1182)

* check request at the most recent finalized block

* update version
This commit is contained in:
Dev Kalra 2023-12-14 17:55:10 +05:30 committed by GitHub
parent 654c1eae89
commit d420786166
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
3 changed files with 3 additions and 2 deletions

2
fortuna/Cargo.lock generated
View File

@ -1486,7 +1486,7 @@ dependencies = [
[[package]] [[package]]
name = "fortuna" name = "fortuna"
version = "2.0.0" version = "2.0.1"
dependencies = [ dependencies = [
"anyhow", "anyhow",
"axum", "axum",

View File

@ -1,6 +1,6 @@
[package] [package]
name = "fortuna" name = "fortuna"
version = "2.0.0" version = "2.0.1"
edition = "2021" edition = "2021"
[dependencies] [dependencies]

View File

@ -189,6 +189,7 @@ impl EntropyReader for PythContract {
) -> Result<Option<reader::Request>> { ) -> Result<Option<reader::Request>> {
let r = self let r = self
.get_request(provider_address, sequence_number) .get_request(provider_address, sequence_number)
.block(ethers::core::types::BlockNumber::Finalized)
.call() .call()
.await?; .await?;