celestia-app icon indicating copy to clipboard operation
celestia-app copied to clipboard

Published 20 hours ago • verified publisher icon celestiaorg

Tx client needs proof of the last nonce for their account

Open cmwaters opened this issue 10 months ago • 0 comments

Summary

This recent PR https://github.com/celestiaorg/celestia-app/pull/3196 added the ability to retry submitting a transaction if the nonce was incorrect. The problem however is that we are trusting the consensus node that we are submitting the transaction to. They could simply lie and manipulate the client to sign the same transaction several times and by doing so, bypass replay protection. The client should actually request a proof of the state of their account and verify it.

For Admin Use

  • [ ] Not duplicate issue
  • [ ] Appropriate labels applied
  • [ ] Appropriate contributors tagged
  • [ ] Contributor assigned/self-assigned

cmwaters avatar Apr 04 '24 11:04 cmwaters