Skip to content
This repository was archived by the owner on Feb 11, 2025. It is now read-only.

Review before deploying to Frontier#10

Open
ethers wants to merge 19 commits into
emptyfrom
forReview
Open

Review before deploying to Frontier#10
ethers wants to merge 19 commits into
emptyfrom
forReview

Conversation

@ethers
Copy link
Copy Markdown
Member

@ethers ethers commented Nov 30, 2015

BTC Relay is deployed on testnet (http://btcrelay.org).
A code/security review/audit is one of the major remaining items to deploy a version to Frontier.

To make it easier for you, the code has been separated.
1st commit has the contracts, start with btcrelay.se.
2nd has the tests.
Some of the TODO in the code are to ask for your feedback.
For remaining files, see https://github.com/ethereum/btcrelay

Please review and I'll be happy to acknowledge your contributions.

Thanks!

unfortunately getting very close to 3.1M gas during deploy

_height is only 1 more, when using Satoshi's genesis, but only possible
for limited testing, so the TODO is removed and still documented in
setInitialParent
Comment thread btcrelay.se Outdated
Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Calling feePaid in verifyTx instead of computeMerkle allows an attacker to re-implement its own verifyTx without the fee check, therefore using the full functionality of btcrelay without ever paying a fee to block header relayers.

@ethers
Copy link
Copy Markdown
Member Author

ethers commented Dec 14, 2015

Above commits have been "merged" to develop branch

Storing headers cost ~2% more, but this is a reasonable tradeoff due
to significant 700K gas cost savings during contract deployment and
avoids complexities associated with requiring multiple contracts.
fix test_fee.py fourthRec to be tester.a4
@ethers
Copy link
Copy Markdown
Member Author

ethers commented Dec 22, 2015

Above commits have been "merged" to develop branch

@ethers
Copy link
Copy Markdown
Member Author

ethers commented Dec 30, 2015

Latest code for review is https://github.com/ethereum/btcrelay (develop branch), but for now it doesn't offer easy way to make comments in code like this PR.

@ethers
Copy link
Copy Markdown
Member Author

ethers commented Feb 1, 2016

For eligibility in bounty program, please check https://blog.ethereum.org/2016/02/17/btc_relay_included_in_bounty_program and the rules on bounty.ethdev.com (for example this pull request is on an old commit, so check that the bug you are submitting hasn't been covered in the Issues or already fixed in https://github.com/ethereum/btcrelay/tree/develop)

sandrasong pushed a commit to Consensys/btcrelay that referenced this pull request May 26, 2016
separate out incentives; update README with live testnet info
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants