From d6a72ebfe42254d25c8072875510efbbf8b5312c Mon Sep 17 00:00:00 2001
From: samkim-crypto <skim13@cs.stanford.edu>
Date: Thu, 27 Oct 2022 12:40:26 +0900
Subject: [PATCH] Add pubkey consistency check on account and proof data
 (#3767)

---
 .../src/extension/confidential_transfer/processor.rs          | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/token/program-2022/src/extension/confidential_transfer/processor.rs b/token/program-2022/src/extension/confidential_transfer/processor.rs
index ffdbb4ee..351a17fe 100644
--- a/token/program-2022/src/extension/confidential_transfer/processor.rs
+++ b/token/program-2022/src/extension/confidential_transfer/processor.rs
@@ -252,6 +252,10 @@ fn process_empty_account(
         return Err(ProgramError::InvalidInstructionData);
     }
 
+    if confidential_transfer_account.encryption_pubkey != proof_data.pubkey {
+        return Err(TokenError::ConfidentialTransferElGamalPubkeyMismatch.into());
+    }
+
     confidential_transfer_account.available_balance = EncryptedBalance::zeroed();
     confidential_transfer_account.closable()?;