Skip to content

Update 2025-07 - Enhanced Treasury Withdrawal Security

Latest
Compare
Choose a tag to compare
@gitmachtl gitmachtl released this 02 Jul 07:18

Updates

  • Scripts 24a (generate vote) and 24c (query votes) are now displaying the public key of included author signatures for further verification

  • Scripts 24a (generate vote) and 24c (query votes) are now doing a check on the special fields Intersect inserts into there TreasuryWithdrawals to improve security and find scams. The special fields are within .body.onChain of the metadata file like:

     "onChain" : {
       "governanceActionType": "treasuryWithdrawals",
       "depositReturnAddress": "stake1uyfs09hz8aw9vk202zkw8seypy3jr87xnm3vkm3v37kwc6q6dfjar",
       "withdrawals": [
         {
           "withdrawalAddress": "stake1uyfs09hz8aw9vk202zkw8seypy3jr87xnm3vkm3v37kwc6q6dfjar",
           "withdrawalAmount": 1000000000
         }
       ]
     }

image

  • Scripts 24a (generate vote) and 24c (query votes) are now showing all withdrawal addresses/hashes in TreasuryWithdrawal actions that contains multiple payout destinations

image

  • Script 25b (register action) now also outputs the CIP-129 governance action bech version in addition to the legacy format.

  • This update includes cardano-signer 1.26.0