Labels: security, bug
Priority: High
Estimated Time: 1.5 hours
Description:
This is the security-hardening companion to #22/#28: even after the immediate test-blocking bug is fixed, add a durable guard so a placeholder/zero treasury address can never again ship to a deployed environment.
Tasks:
- Add a contract-init-time check rejecting a zero or well-known placeholder address for
treasury
- Add a deploy-script (
scripts/deploy.sh) pre-flight check for the configured treasury address's trustlines
- Add a CI check on
scripts/deploy_testnet.sh and scripts/deploy.sh for hardcoded placeholder addresses
Labels:
security,bugPriority: High
Estimated Time: 1.5 hours
Description:
This is the security-hardening companion to #22/#28: even after the immediate test-blocking bug is fixed, add a durable guard so a placeholder/zero treasury address can never again ship to a deployed environment.
Tasks:
treasuryscripts/deploy.sh) pre-flight check for the configured treasury address's trustlinesscripts/deploy_testnet.shandscripts/deploy.shfor hardcoded placeholder addresses