Trail of Bits tBTC v2 AC Extension — security remediation#4126

Open

lrsaturnino wants to merge 18 commits into

feat/psbt-covenant-final-project-prfrom

fix/tob-tbtcacext-remediation

Commits on Jul 1, 2026

fix(tecdsa): TOB-TBTCACEXT-11 — count the third operator's seats in triplet eligibility filter
lrsaturnino
committed
fix(ethereum): TOB-TBTCACEXT-10 — read TxMaxFee from its own field in past redemption events
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-5 — guard doneSigners map on every access in signing done check
lrsaturnino
committed
fix(retransmission): TOB-TBTCACEXT-6 — synchronize BackoffStrategy tick counters
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-26 — reject signing-done messages from non-attempt members
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-70 — reject non-canonical high-S signer approval certificates
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-2 — derive P2WSH output script for migration destination
lrsaturnino
committed
fix(covenantsigner): TOB-TBTCACEXT-65 — use a flat jobs directory so jobs persist across restarts
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-87 — deauthorize archived and non-live wallets in covenant signing
lrsaturnino
committed
fix(covenantsigner): TOB-TBTCACEXT-92 — fail production signer startup without approval roots
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-36 — do not archive wallets that are pending DKG approval
lrsaturnino
committed
fix(escrow): TOB-TBTCACEXT-27 — accumulate the withdrawn counter on revoked withdrawals
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-56 — deduplicate DKG results only after handling completes
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-57 — deduplicate wallet closures only after archival
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-72 — deduplicate DKG started events only after handling
lrsaturnino
committed
fix(spv): TOB-TBTCACEXT-22 — scan past spam when discovering SPV proof targets
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-1 — fail closed on covenant signing without bridge fraud defense
lrsaturnino
committed
Merge feat/psbt-covenant-final-project-pr into fix/tob-tbtcacext-remediation
lrsaturnino
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Trail of Bits tBTC v2 AC Extension — security remediation#4126

Trail of Bits tBTC v2 AC Extension — security remediation#4126
lrsaturnino wants to merge 18 commits into
feat/psbt-covenant-final-project-prfrom
fix/tob-tbtcacext-remediation

Commits on Jul 1, 2026

fix(tecdsa): TOB-TBTCACEXT-11 — count the third operator's seats in triplet eligibility filter

fix(ethereum): TOB-TBTCACEXT-10 — read TxMaxFee from its own field in past redemption events

fix(tbtc): TOB-TBTCACEXT-5 — guard doneSigners map on every access in signing done check

fix(retransmission): TOB-TBTCACEXT-6 — synchronize BackoffStrategy tick counters

fix(tbtc): TOB-TBTCACEXT-26 — reject signing-done messages from non-attempt members

fix(tbtc): TOB-TBTCACEXT-70 — reject non-canonical high-S signer approval certificates

fix(tbtc): TOB-TBTCACEXT-2 — derive P2WSH output script for migration destination

fix(covenantsigner): TOB-TBTCACEXT-65 — use a flat jobs directory so jobs persist across restarts

fix(tbtc): TOB-TBTCACEXT-87 — deauthorize archived and non-live wallets in covenant signing

fix(covenantsigner): TOB-TBTCACEXT-92 — fail production signer startup without approval roots

fix(tbtc): TOB-TBTCACEXT-36 — do not archive wallets that are pending DKG approval

fix(escrow): TOB-TBTCACEXT-27 — accumulate the withdrawn counter on revoked withdrawals

fix(tbtc): TOB-TBTCACEXT-56 — deduplicate DKG results only after handling completes

fix(tbtc): TOB-TBTCACEXT-57 — deduplicate wallet closures only after archival

fix(tbtc): TOB-TBTCACEXT-72 — deduplicate DKG started events only after handling

fix(spv): TOB-TBTCACEXT-22 — scan past spam when discovering SPV proof targets

fix(tbtc): TOB-TBTCACEXT-1 — fail closed on covenant signing without bridge fraud defense

Merge feat/psbt-covenant-final-project-pr into fix/tob-tbtcacext-remediation