Check whether vaa recipient matches the token account

Change-Id: Iab326cd735c764649dc031d813dbb8818d5e74f3

solana/modules/nft_bridge/program/src/api/complete_transfer.rs

@@ -117,6 +117,9 @@ pub fn complete_native(
     if accs.vaa.to_chain != CHAIN_ID_SOLANA {
         return Err(InvalidChain.into());
     }
+    if accs.vaa.to != accs.to.info().key.to_bytes() {
+        return Err(InvalidRecipient.into());
+    }
 
     // Prevent vaa double signing
     accs.vaa.verify(ctx.program_id)?;
@@ -227,6 +230,9 @@ pub fn complete_wrapped(
     if accs.vaa.to_chain != CHAIN_ID_SOLANA {
         return Err(InvalidChain.into());
     }
+    if accs.vaa.to != accs.to.info().key.to_bytes() {
+        return Err(InvalidRecipient.into());
+    }
 
     accs.vaa.verify(ctx.program_id)?;
     accs.vaa.claim(ctx, accs.payer.key)?;

solana/modules/nft_bridge/program/src/lib.rs

@@ -61,6 +61,7 @@ pub enum TokenBridgeError {
     WrongAccountOwner,
     TokenNotNFT,
     InvalidAssociatedAccount,
+    InvalidRecipient,
 }
 
 impl From<TokenBridgeError> for SolitaireError {

solana/modules/token_bridge/program/src/api/complete_transfer.rs

@@ -121,6 +121,9 @@ pub fn complete_native(
     if accs.vaa.to_chain != CHAIN_ID_SOLANA {
         return Err(InvalidChain.into());
     }
+    if accs.vaa.to != accs.to.info().key.to_bytes() {
+        return Err(InvalidRecipient.into());
+    }
 
     // Prevent vaa double signing
     accs.vaa.verify(ctx.program_id)?;
@@ -237,6 +240,9 @@ pub fn complete_wrapped(
     if accs.vaa.to_chain != CHAIN_ID_SOLANA {
         return Err(InvalidChain.into());
     }
+    if accs.vaa.to != accs.to.info().key.to_bytes() {
+        return Err(InvalidRecipient.into());
+    }
 
     accs.vaa.verify(ctx.program_id)?;
     accs.vaa.claim(ctx, accs.payer.key)?;

solana/modules/token_bridge/program/src/lib.rs

@@ -64,6 +64,7 @@ pub enum TokenBridgeError {
     UninitializedMint,
     WrongAccountOwner,
     InvalidFee,
+    InvalidRecipient,
 }
 
 impl From<TokenBridgeError> for SolitaireError {