Skip to content

fix(electrum): backport PR#2188#2228

Open
oleonardolima wants to merge 2 commits into
bitcoindevkit:release/chain-0.23.xfrom
oleonardolima:backport/pr-2188
Open

fix(electrum): backport PR#2188#2228
oleonardolima wants to merge 2 commits into
bitcoindevkit:release/chain-0.23.xfrom
oleonardolima:backport/pr-2188

Conversation

@oleonardolima

Copy link
Copy Markdown
Collaborator

Description

It's a backport for the the bdk_electrum fix introduced by #2188. If you're interested in the original fix, check the original PR for discussion/rationale.

Changelog notice

### Fixed
- Add a verification check that tx.compute_txid() == txid after fetching from the server, returning an error on mismatch

Checklists

All Submissions:

@oleonardolima oleonardolima added this to the Chain 0.23.4 milestone Jun 15, 2026
@oleonardolima oleonardolima self-assigned this Jun 15, 2026
@oleonardolima oleonardolima added the backport A bug fix or security patch to be ported to a previous release label Jun 15, 2026
oleonardolima and others added 2 commits June 15, 2026 11:01
An Electrum server could return an arbitrary transaction when
`fetch_tx()` requests a specific txid. The returned transaction was
cached and used without verifying that its computed txid matches the
requested one.

Add a verification check that `tx.compute_txid() == txid` after
fetching from the server, returning an error on mismatch.

Signed-off-by: Elias Rohrer <dev@tnull.de>

@luisschwab luisschwab left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK f477553

@nymius nymius left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

ACK f477553

@sdmg15 sdmg15 left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

uTack f477553

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport A bug fix or security patch to be ported to a previous release

Projects

Status: Needs Review

Development

Successfully merging this pull request may close these issues.

5 participants