Skip to content

[F-2026-17758] Missing upstream security patch train after fork point#23

Open
AryaLanjewar3005 wants to merge 441 commits into
audit-fixesfrom
audit/evm-merge
Open

[F-2026-17758] Missing upstream security patch train after fork point#23
AryaLanjewar3005 wants to merge 441 commits into
audit-fixesfrom
audit/evm-merge

Conversation

@AryaLanjewar3005

Copy link
Copy Markdown
Collaborator

Description

Closes: #XXXX


Author Checklist

All items are required. Please add a note to the item if the item is not applicable and
please add links to any relevant follow up issues.

I have...

  • tackled an existing issue or discussed with a team member
  • left instructions on how to review the changes
  • targeted the main branch

Eric-Warehime and others added 30 commits July 14, 2025 14:11
* fix: non-eip-155 tx panic when get signer

Closes: cosmos#280

* treat zero chainID differently

* fix zero check

* fix comment

* fix conditon
* add default router for evidence keeper

* fix type handling

When calling submitEvidence through hardhat(ethers.js), type conversion from args[1] into Equivocation doesn't work.

* fix lint

* enable evidence precompile at local_node.sh

* implement no-op evidence handler

* remove un-used code

---------

Co-authored-by: Vlad J <vladjdk@gmail.com>
* abci

* eip1559

* grpc

* msg

* params

* keeper

* integration

* rename

* align utils test that depends on NewTestSuite

bank

config

evm

* keep evmd -> evm dependency

* set antehandler before seal

* cleanup

* cleanup cfg

* cleanup

* cleanup

* reuse

* vm

* genesis

* fee

* param

* statedb

* add evmd

* revert

* test: cleanup EvmAppOptions related config
* fix: align BytesToAddress in parseHexAddress

that requires exact 20-byte instead of direct Address conversion

* test

---------

Co-authored-by: Vlad J <vladjdk@gmail.com>
Co-authored-by: Vlad J <vladjdk@gmail.com>
Co-authored-by: Alex | Interchain Labs <alex@interchainlabs.io>
Co-authored-by: Vlad J <vladjdk@gmail.com>
Co-authored-by: Alex | Interchain Labs <alex@interchainlabs.io>
…osmos#279)

* this change should have been included in https://github.com/cosmos/evm/pull/168/files
* no need replace directive after ethereum/go-ethereum@66e1a6e
* for more info, cockroachdb/pebble@aa077af...v1.1.5

Co-authored-by: Alex | Interchain Labs <alex@interchainlabs.io>
Co-authored-by: Alex | Interchain Labs <alex@interchainlabs.io>
* feat: support build tag with rocksdb

to avoid undefined: config.OpenDB when build with rocksdb

* Apply suggestions from code review

---------

Co-authored-by: Vlad J <vladjdk@gmail.com>
Co-authored-by: Alex | Interchain Labs <alex@interchainlabs.io>
…sult (cosmos#289)

* fix: align revert reason with go ethereum that expects hex-encoded result

* cleanup

* cleanup

* Apply suggestions from code review
* address codec

* ok

* update all the other ones

* add tests

* tests and stuff and lint

* use common.Address

* make it so these can be defined by the end user

* comment explainer

* private

* linter
* add enforcement of one evm message per cosmos message

* fix index

* add mocks and test suite

---------

Co-authored-by: Alex | Interchain Labs <alex@interchainlabs.io>
vladjdk and others added 19 commits October 21, 2025 10:52
* Clean up events on EVM reversion in try-catch

* backport v0.3.x-specific file layout and helpers

* yihuang-patch adaptation for v0.3.x

Adds balance handler factory to un-refactored precompile code, adapting it for Distribution, Staking, Slashing, ICS20, Gov, and the now-deprecated Evidence. Skips the ERC20 as that one did not yet make use of the balance handler in v0.4.x.

* Add adapted test for v0.3.x

Added balance handler test, adapted for the v0.4.x precompile structure. Uses a decomposed version of the p.RunSetup function without the method checks.

Also, has to use Ginkgo tests with explicit state saving to prevent overwrites. Note that the events list here is much larger due to the structure of the factory contract caller.

* fix mocks2

* Add debug json

* add debug comments
…s#769) (cosmos#782)

* fix: ibc middleware verify sender address incorrectly (cosmos#769)

* Problem: ibc middleware verify sender address incorrectly

* Update CHANGELOG.md

Signed-off-by: yihuang <yi.huang@mantrachain.io>

* remove sendToSelf check

* fix test build

* fix test

* Fix test

* fix test

---------

Signed-off-by: yihuang <yi.huang@mantrachain.io>
Co-authored-by: Vlad J <vladjdk@gmail.com>
Co-authored-by: Alex | Cosmos Labs <alex@cosmoslabs.io>
(cherry picked from commit 91519e4)

# Conflicts:
#	CHANGELOG.md

* fix

---------

Co-authored-by: yihuang <yi.codeplayer@gmail.com>
Co-authored-by: aljo242 <alex@cosmoslabs.io>
…#783)

* fix: event emission in erc20 precompile (cosmos#774)

* fix

* fix

(cherry picked from commit a3a2a06)

# Conflicts:
#	CHANGELOG.md

* fix

---------

Co-authored-by: Alex | Cosmos Labs <alex@cosmoslabs.io>
…nInfo as fallback (backport: 790 816) (cosmos#831)

* fix: `evmCoinInfo` not exists in historical state (cosmos#790)

* Problem: evmCoinInfo not exists in historical state (#16)

* support default evmCoinInfo

* changelog

* Update CHANGELOG.md

---------

Co-authored-by: Alex | Cosmos Labs <alex@cosmoslabs.io>

* fix: avoid nil pointer when RPC requests execute before evmCoinInfo init (cosmos#816)

* fix: avoid nil pointer when RPC requests execute before evmCoinInfo init

* resolve

---------

Co-authored-by: yihuang <yi.huang@mantrachain.io>
Co-authored-by: Alex | Cosmos Labs <alex@cosmoslabs.io>
…#836)

* fix: allow ledger flag work with coin type 60 (cosmos#690)

* fix: allow ledger flag work with coin type 60

aligned ledger firmware with go-ethereum

* lint

* allow to generate both

* cleanup

* fix test

* fix build

* fix resolve

---------

Co-authored-by: Alex | Cosmos Labs <alex@cosmoslabs.io>

* bump sdk to v0.53.x

---------

Co-authored-by: Alex | Cosmos Labs <alex@cosmoslabs.io>
… fix RevertError to store raw bytes, replace removed BalanceHandlerFactory with

   GetBalanceHandler, drop OS-app integration tests incompatible with standalone module
@AryaLanjewar3005 AryaLanjewar3005 changed the title Audit/evm merge [F-2026-17758] Missing upstream security patch train after fork point Jun 12, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.