certusone
/
wormhole
mirror of https://github.com/certusone/wormhole.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity

test: accountant e2e

This commit is contained in:
Evan Gray 2023-01-27 20:48:19 +00:00 committed by Evan Gray
parent cca154baf6
commit 7f9a03254a
10 changed files with 17410 additions and 9379 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
Tiltfile
View File

@ -280,7 +280,19 @@ def build_node_yaml():
"--wormchainWS",
"ws://wormchain:26657/websocket",
"--wormchainLCD",
"http://wormchain:1317"
"http://wormchain:1317",
"--wormchainURL",
"wormchain:9090",
"--wormchainKeyPath",
"/tmp/mounted-keys/wormchain/wormchainKey",
"--wormchainKeyPassPhrase",
"test0000",
"--accountantWS",
"http://wormchain:26657",
"--accountantContract",
"wormhole14hj2tavq8fpesdwxxcu44rty3hh90vhujrvcmstl4zr3txmfvw9srrg465",
"--accountantCheckEnabled",
"true"
]
return encode_yaml_stream(node_yaml_with_replicas)
@ -303,7 +315,7 @@ if algorand:
if aptos:
guardian_resource_deps = guardian_resource_deps + ["aptos"]
if wormchain:
guardian_resource_deps = guardian_resource_deps + ["wormchain"]
guardian_resource_deps = guardian_resource_deps + ["wormchain", "wormchain-deploy"]
if sui:
guardian_resource_deps = guardian_resource_deps + ["sui"]
@ -571,6 +583,12 @@ if ci_tests:
trigger_mode = trigger_mode,
resource_deps = [], # testing/spydk.sh handles waiting for spy, not having deps gets the build earlier
)
k8s_resource(
"accountant-ci-tests",
labels = ["ci"],
trigger_mode = trigger_mode,
resource_deps = ["const-gen"], # uses devnet-consts.json, but wormchain/contracts/tools/test_accountant.sh handles waiting for guardian, not having deps gets the build earlier
)
if terra_classic:
docker_build(
@ -822,7 +840,7 @@ if wormchain:
k8s_resource(
"wormchain-deploy",
resource_deps = ["wormchain"],
resource_deps = ["const-gen", "wormchain"],
labels = ["wormchain"],
trigger_mode = trigger_mode,
)

25
devnet/tests.yaml
View File

@ -47,3 +47,28 @@ spec:
- "/app/testing/success"
initialDelaySeconds: 5
periodSeconds: 5
---
kind: Job
apiVersion: batch/v1
metadata:
name: accountant-ci-tests
spec:
backoffLimit: 0
template:
spec:
restartPolicy: Never
containers:
- name: accountant-ci-tests
image: wormchain-deploy
command:
- /bin/sh
- -c
- "bash /app/tools/test_accountant.sh && touch /app/tools/success"
readinessProbe:
exec:
command:
- test
- -e
- "/app/accountant/success"
initialDelaySeconds: 5
periodSeconds: 5

5
docs/devnet.md
View File

@ -6,6 +6,7 @@
| Test ERC20 | ETH | 0x2D8BE6BF0baA74e0A907016679CaE9190e80dD0A | Tokens minted to Test Wallet |
| Test NFT | ETH | 0x5b9b42d6e4B2e4Bf8d42Eba32D46918e10899B66 | One minted to Test Wallet |
| Test WETH | ETH | 0xDDb64fE46a91D46ee29420539FC25FD07c5FEa3E | Tokens minted to Test Wallet |
| Test ERC20 GA | ETH | 0xf19A2A01B70519f67ADb309a994Ec8c69A967E8b | Tokens minted to Test Wallet 9 |
| Bridge Core | ETH | 0xC89Ce4735882C9F0f0FE26686c53074E09B0D550 | |
| Token Bridge | ETH | 0x0290FB167208Af455bB137780163b7B7a9a10C16 | |
| NFT Bridge | ETH | 0x26b4afb60d6c903165150c6f0aa14f8016be4aec | |
@ -35,12 +36,12 @@ The terra testnet can be used just like a normal localterra network (can be sele
### Algorand
The `admin.py` deployment tool can be used to generate a set of five prefunded accounts using the `--fundDevAccounts` option, with the following addresses and mnemonics:
The `admin.py` deployment tool can be used to generate a set of five prefunded accounts using the `--fundDevAccounts` option, with the following addresses and mnemonics:
DEV7AREMQSPWWDDFFJ3A5OIMMDCZN4YT5U2MQBN76Y4J5ERQQ3MWPIHUYA 800M ALGO
provide warfare better filter glory civil help jacket alpha penalty van fiber code upgrade web more curve sauce merit bike satoshi blame orphan absorb modify
DEVBE5BIDJV6SWV7E3XPLB5DXZG2JYCWHGXBAQH6WNBZA3G7SQQ5HUJQII
DEVBE5BIDJV6SWV7E3XPLB5DXZG2JYCWHGXBAQH6WNBZA3G7SQQ5HUJQII
album neglect very nasty input trick annual arctic spray task candy unfold letter drill glove sword flock omit dial rather session mesh slow abandon slab
DEV3AURNEWR5TRFXIOBP2VTCTZIS52Q3XJHNJ57M4IZLMNZ5ABQ6M7AL6E

23
ethereum/scripts/deploy_test_token.js
View File

@ -21,7 +21,7 @@ const interateToStandardTransactionCount = async () => {
to: accounts[0],
from: accounts[0],
value: 530,
})
});
}
const burnCount = await web3.eth.getTransactionCount(accounts[0], "latest");
@ -31,7 +31,7 @@ const interateToStandardTransactionCount = async () => {
return Promise.resolve();
};
module.exports = async function (callback) {
module.exports = async function(callback) {
try {
const accounts = await web3.eth.getAccounts();
@ -96,6 +96,25 @@ module.exports = async function (callback) {
throw new Error("unexpected WETH token address");
}
// deploy token contract
const accountantTokenAddress = (
await ERC20.new("Accountant Test Token", "GA")
).address;
const accountantToken = new web3.eth.Contract(
ERC20.abi,
accountantTokenAddress
);
console.log("Accountant test token deployed at: " + accountantTokenAddress);
// mint 1000 units
await accountantToken.methods
.mint(accounts[9], "1000000000000000000000")
.send({
from: accounts[0],
gas: 1000000,
});
callback();
} catch (e) {
callback(e);

6
scripts/devnet-consts.json
View File

@ -148,6 +148,12 @@
"name": "Wrapped Ether",
"symbol": "WETH",
"decimals": 18
},
"testGA": {
"address": "0xf19A2A01B70519f67ADb309a994Ec8c69A967E8b",
"name": "Accountant Test Token",
"symbol": "GA",
"decimals": 18
}
}
},

2
sdk/js/src/token_bridge/__tests__/consts.ts
View File

@ -23,7 +23,7 @@ export const ETH_PRIVATE_KEY7 =
export const ETH_PRIVATE_KEY8 =
"0x829e924fdf021ba3dbbc4225edfece9aca04b929d6e75613329ca6f1d31c0bb4"; // account 8 - unused
export const ETH_PRIVATE_KEY9 =
"0xb0057716d5917badaf911b193b12b910811c1497b5bada8d7711f758981c3773"; // account 9 - unused
"0xb0057716d5917badaf911b193b12b910811c1497b5bada8d7711f758981c3773"; // account 9 - accountant tests
export const SOLANA_HOST = ci
? "http://solana-devnet:8899"
: "http://localhost:8899";

26271
wormchain/contracts/tools/package-lock.json generated
View File

File diff suppressed because it is too large Load Diff

58
wormchain/contracts/tools/package.json
View File

@ -1,30 +1,32 @@
{
"name": "@wormhole-foundation/wormchain-contract-tools",
"version": "0.0.1",
"description": "scripts for working with wormchain contracts",
"main": "deploy_wormchain.ts",
"scripts": {
"deploy-wormchain": "ts-node deploy_wormchain.ts",
"test-wormchain": "ts-node test_wormchain.ts",
"deploy-and-test": "npm run deploy-wormchain && npm run test-wormchain"
},
"keywords": [],
"author": "",
"dependencies": {
"@certusone/wormhole-sdk": "0.9.9",
"@cosmjs/cosmwasm-stargate": "0.29.5",
"@wormhole-foundation/wormchain-sdk": "file:../../ts-sdk",
"cosmwasm": "1.1.1",
"dotenv": "16.0.3",
"elliptic": "6.5.4",
"ethers": "5.7.2",
"js-sha3": "0.8.0",
"web3-eth-abi": "1.8.1",
"yargs": "17.6.2"
},
"devDependencies": {
"@types/elliptic": "6.4.14",
"ts-node": "10.9.1",
"typescript": "4.9.4"
}
"name": "@wormhole-foundation/wormchain-contract-tools",
"version": "0.0.1",
"description": "scripts for working with wormchain contracts",
"main": "deploy_wormchain.ts",
"scripts": {
"deploy-wormchain": "ts-node deploy_wormchain.ts",
"test-accountant": "ts-node test_accountant.ts",
"test-wormchain": "ts-node test_wormchain.ts",
"deploy-and-test": "npm run deploy-wormchain && npm run test-wormchain"
},
"keywords": [],
"author": "",
"dependencies": {
"@certusone/wormhole-sdk": "0.9.9",
"@cosmjs/cosmwasm-stargate": "0.29.5",
"@improbable-eng/grpc-web-node-http-transport": "0.15.0",
"@wormhole-foundation/wormchain-sdk": "file:../../ts-sdk",
"cosmwasm": "1.1.1",
"dotenv": "16.0.3",
"elliptic": "6.5.4",
"ethers": "5.7.2",
"js-sha3": "0.8.0",
"web3-eth-abi": "1.8.1",
"yargs": "17.6.2"
},
"devDependencies": {
"@types/elliptic": "6.4.14",
"ts-node": "10.9.1",
"typescript": "4.9.4"
}
}

4
wormchain/contracts/tools/test_accountant.sh Normal file
View File

@ -0,0 +1,4 @@
#!/bin/sh
set -e
while [[ "$(curl -s -o /dev/null -w ''%{http_code}'' guardian:6060/readyz)" != "200" ]]; do sleep 5; done
CI=true npm run test-accountant

371
wormchain/contracts/tools/test_accountant.ts Normal file
View File

@ -0,0 +1,371 @@
import "dotenv/config";
import {
approveEth,
attestFromEth,
CHAIN_ID_BSC,
CHAIN_ID_ETH,
CONTRACTS,
createWrappedOnEth,
getEmitterAddressEth,
getForeignAssetEth,
getSignedVAAWithRetry,
hexToUint8Array,
parseSequenceFromLogEth,
redeemOnEth,
serialiseVAA,
sign,
TokenBridgeTransfer,
transferFromEth,
tryNativeToUint8Array,
uint8ArrayToHex,
VAA,
} from "@certusone/wormhole-sdk";
import { NodeHttpTransport } from "@improbable-eng/grpc-web-node-http-transport";
import { ethers } from "ethers";
import * as devnetConsts from "./devnet-consts.json";
import { parseUnits } from "ethers/lib/utils";
if (process.env.INIT_SIGNERS_KEYS_CSV === "undefined") {
let msg = `.env is missing. run "make contracts-tools-deps" to fetch.`;
console.error(msg);
throw msg;
}
// TODO: consider using jest
/*
* Goals:
* 1. Ensure a token can be sent from its origin chain
* 2. Ensure a token can be sent back from a foreign chain
* 3. Ensure spoofed tokens for more than the outstanding amount rejects successfully
* 4. Validate the guardian metrics for each of these cases
* 5. Bonus: Validate the on chain contract state via queries
*/
const ci = !!process.env.CI;
const GUARDIAN_HOST = ci ? "guardian" : "localhost";
const GUARDIAN_RPCS = [`http://${GUARDIAN_HOST}:7071`];
const GUARDIAN_METRICS = `http://${GUARDIAN_HOST}:6060/metrics`;
const ETH_NODE_URL = ci ? "ws://eth-devnet:8545" : "ws://localhost:8545";
const BSC_NODE_URL = ci ? "ws://eth-devnet2:8545" : "ws://localhost:8546";
const ETH_PRIVATE_KEY9 =
"0xb0057716d5917badaf911b193b12b910811c1497b5bada8d7711f758981c3773";
const ETH_GA_TEST_TOKEN =
devnetConsts.chains[CHAIN_ID_ETH].addresses.testGA.address;
const DECIMALS = devnetConsts.chains[CHAIN_ID_ETH].addresses.testGA.decimals;
const VAA_SIGNERS = process.env.INIT_SIGNERS_KEYS_CSV.split(",");
const GOVERNANCE_CHAIN = Number(devnetConsts.global.governanceChainId);
const GOVERNANCE_EMITTER = devnetConsts.global.governanceEmitterAddress;
function sleep(ms) {
return new Promise((resolve) => setTimeout(resolve, ms));
}
// Guardian metrics are prometheus data
const fetchGlobalAccountantMetrics = async (): Promise<{
global_accountant_connection_errors_total: number;
global_accountant_error_events_received: number;
global_accountant_events_received: number;
global_accountant_submit_failures: number;
global_accountant_total_balance_errors: number;
global_accountant_total_digest_mismatches: number;
global_accountant_transfer_vaas_outstanding: number;
global_accountant_transfer_vaas_submitted: number;
global_accountant_transfer_vaas_submitted_and_approved: number;
}> =>
(await (await fetch(GUARDIAN_METRICS)).text())
.split("\n")
.filter((m) => m.startsWith("global_accountant"))
.reduce((p, m) => {
const [k, v] = m.split(" ");
p[k] = Number(v);
return p;
}, {} as any);
(async () => {
//
// PREAMBLE
//
// create a signer for Eth
const ethProvider = new ethers.providers.WebSocketProvider(ETH_NODE_URL);
const ethSigner = new ethers.Wallet(ETH_PRIVATE_KEY9, ethProvider);
// create a signer for BSC
const bscProvider = new ethers.providers.WebSocketProvider(BSC_NODE_URL);
const bscSigner = new ethers.Wallet(ETH_PRIVATE_KEY9, bscProvider);
let attestedAddress = "";
//
// STEP 0 - attest the token
//
{
attestedAddress = await getForeignAssetEth(
CONTRACTS.DEVNET.bsc.token_bridge,
bscProvider,
CHAIN_ID_ETH,
tryNativeToUint8Array(ETH_GA_TEST_TOKEN, CHAIN_ID_ETH)
);
if (attestedAddress && attestedAddress !== ethers.constants.AddressZero) {
console.log("already attested");
} else {
console.log("attesting...");
// attest the test token
const receipt = await attestFromEth(
CONTRACTS.DEVNET.ethereum.token_bridge,
ethSigner,
ETH_GA_TEST_TOKEN
);
// get the sequence from the logs (needed to fetch the vaa)
const sequence = parseSequenceFromLogEth(
receipt,
CONTRACTS.DEVNET.ethereum.core
);
const emitterAddress = getEmitterAddressEth(
CONTRACTS.DEVNET.ethereum.token_bridge
);
console.log(`fetching vaa ${sequence}...`);
// poll until the guardian(s) witness and sign the vaa
const { vaaBytes: signedVAA } = await getSignedVAAWithRetry(
GUARDIAN_RPCS,
CHAIN_ID_ETH,
emitterAddress,
sequence,
{
transport: NodeHttpTransport(),
}
);
console.log("creating...");
await createWrappedOnEth(
CONTRACTS.DEVNET.bsc.token_bridge,
bscSigner,
signedVAA
);
attestedAddress = await getForeignAssetEth(
CONTRACTS.DEVNET.bsc.token_bridge,
bscProvider,
CHAIN_ID_ETH,
tryNativeToUint8Array(ETH_GA_TEST_TOKEN, CHAIN_ID_ETH)
);
}
}
//
// STEP 1 - send the token out
//
{
const beforeMetrics = await fetchGlobalAccountantMetrics();
const amount = parseUnits("1", DECIMALS);
// approve the bridge to spend tokens
console.log("approving...");
await approveEth(
CONTRACTS.DEVNET.ethereum.token_bridge,
ETH_GA_TEST_TOKEN,
ethSigner,
amount
);
// transfer tokens out
console.log("transferring...");
const receipt = await transferFromEth(
CONTRACTS.DEVNET.ethereum.token_bridge,
ethSigner,
ETH_GA_TEST_TOKEN,
amount,
CHAIN_ID_BSC,
tryNativeToUint8Array(await bscSigner.getAddress(), CHAIN_ID_BSC)
);
// get the sequence from the logs (needed to fetch the vaa)
const sequence = parseSequenceFromLogEth(
receipt,
CONTRACTS.DEVNET.ethereum.core
);
const emitterAddress = getEmitterAddressEth(
CONTRACTS.DEVNET.ethereum.token_bridge
);
console.log(`fetching vaa ${sequence}...`);
// poll until the guardian(s) witness and sign the vaa
const { vaaBytes: signedVAA } = await getSignedVAAWithRetry(
GUARDIAN_RPCS,
CHAIN_ID_ETH,
emitterAddress,
sequence,
{
transport: NodeHttpTransport(),
}
);
console.log("redeeming...");
await redeemOnEth(CONTRACTS.DEVNET.bsc.token_bridge, bscSigner, signedVAA);
const afterMetrics = await fetchGlobalAccountantMetrics();
console.log(
"approved b/a:",
beforeMetrics.global_accountant_transfer_vaas_submitted_and_approved,
afterMetrics.global_accountant_transfer_vaas_submitted_and_approved
);
if (
afterMetrics.global_accountant_events_received <=
beforeMetrics.global_accountant_events_received ||
afterMetrics.global_accountant_transfer_vaas_submitted <=
beforeMetrics.global_accountant_transfer_vaas_submitted ||
afterMetrics.global_accountant_transfer_vaas_submitted_and_approved <=
beforeMetrics.global_accountant_transfer_vaas_submitted_and_approved
) {
throw new Error("Expected metrics change did not occur");
}
}
//
// STEP 2 - send the token back
//
{
const beforeMetrics = await fetchGlobalAccountantMetrics();
const amount = parseUnits("1", DECIMALS);
// approve the bridge to spend tokens
console.log("approving...");
await approveEth(
CONTRACTS.DEVNET.bsc.token_bridge,
attestedAddress,
bscSigner,
amount
);
// transfer tokens out
console.log("transferring...");
const receipt = await transferFromEth(
CONTRACTS.DEVNET.bsc.token_bridge,
bscSigner,
attestedAddress,
amount,
CHAIN_ID_ETH,
tryNativeToUint8Array(await ethSigner.getAddress(), CHAIN_ID_ETH)
);
// get the sequence from the logs (needed to fetch the vaa)
const sequence = parseSequenceFromLogEth(
receipt,
CONTRACTS.DEVNET.bsc.core
);
const emitterAddress = getEmitterAddressEth(
CONTRACTS.DEVNET.bsc.token_bridge
);
console.log(`fetching vaa ${sequence}...`);
// poll until the guardian(s) witness and sign the vaa
const { vaaBytes: signedVAA } = await getSignedVAAWithRetry(
GUARDIAN_RPCS,
CHAIN_ID_BSC,
emitterAddress,
sequence,
{
transport: NodeHttpTransport(),
}
);
console.log("redeeming...");
await redeemOnEth(
CONTRACTS.DEVNET.ethereum.token_bridge,
ethSigner,
signedVAA
);
const afterMetrics = await fetchGlobalAccountantMetrics();
console.log(
"approved b/a:",
beforeMetrics.global_accountant_transfer_vaas_submitted_and_approved,
afterMetrics.global_accountant_transfer_vaas_submitted_and_approved
);
if (
afterMetrics.global_accountant_events_received <=
beforeMetrics.global_accountant_events_received ||
afterMetrics.global_accountant_transfer_vaas_submitted <=
beforeMetrics.global_accountant_transfer_vaas_submitted ||
afterMetrics.global_accountant_transfer_vaas_submitted_and_approved <=
beforeMetrics.global_accountant_transfer_vaas_submitted_and_approved
) {
throw new Error("Expected metrics change did not occur");
}
}
//
// STEP 3a - redeem spoofed tokens
//
{
console.log("redeeming spoofed tokens");
let vaa: VAA<TokenBridgeTransfer> = {
version: 1,
guardianSetIndex: 0,
signatures: [],
timestamp: 0,
nonce: 0,
emitterChain: CHAIN_ID_ETH,
emitterAddress: getEmitterAddressEth(
CONTRACTS.DEVNET.ethereum.token_bridge
),
sequence: BigInt(979999116 + Math.floor(Math.random() * 100000000)),
consistencyLevel: 0,
payload: {
module: "TokenBridge",
type: "Transfer",
tokenChain: CHAIN_ID_ETH,
tokenAddress: uint8ArrayToHex(
tryNativeToUint8Array(ETH_GA_TEST_TOKEN, CHAIN_ID_ETH)
),
amount: parseUnits("9000", DECIMALS).toBigInt(),
toAddress: uint8ArrayToHex(
tryNativeToUint8Array(await bscSigner.getAddress(), CHAIN_ID_BSC)
),
chain: CHAIN_ID_BSC,
fee: BigInt(0),
},
};
vaa.signatures = sign(VAA_SIGNERS, vaa);
await redeemOnEth(
CONTRACTS.DEVNET.bsc.token_bridge,
bscSigner,
hexToUint8Array(serialiseVAA(vaa))
);
}
//
// STEP 3b - send the spoofed tokens back
//
{
const beforeMetrics = await fetchGlobalAccountantMetrics();
const amount = parseUnits("9000", DECIMALS);
// approve the bridge to spend tokens
console.log("approving...");
await approveEth(
CONTRACTS.DEVNET.bsc.token_bridge,
attestedAddress,
bscSigner,
amount
);
// transfer tokens out
console.log("transferring...");
const receipt = await transferFromEth(
CONTRACTS.DEVNET.bsc.token_bridge,
bscSigner,
attestedAddress,
amount,
CHAIN_ID_ETH,
tryNativeToUint8Array(await ethSigner.getAddress(), CHAIN_ID_ETH)
);
console.log("waiting 30s to fetch metrics...");
await sleep(30 * 1000); // give the guardian a few seconds to pick up the transfers and attempt to submit them
const afterMetrics = await fetchGlobalAccountantMetrics();
console.log(
"balance errors b/a:",
beforeMetrics.global_accountant_total_balance_errors,
afterMetrics.global_accountant_total_balance_errors
);
if (
afterMetrics.global_accountant_error_events_received <=
beforeMetrics.global_accountant_error_events_received ||
afterMetrics.global_accountant_transfer_vaas_submitted <=
beforeMetrics.global_accountant_transfer_vaas_submitted ||
afterMetrics.global_accountant_total_balance_errors <=
beforeMetrics.global_accountant_total_balance_errors
) {
throw new Error("Expected metrics change did not occur");
}
}
ethProvider.destroy();
bscProvider.destroy();
console.log("success!");
})();