Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: checks address proposer #49

Closed
wants to merge 5 commits into from
Closed

fix: checks address proposer #49

wants to merge 5 commits into from

Conversation

ashitakah
Copy link
Contributor

🤖 Linear

Closes GRT-12

Copy link

linear bot commented Jul 9, 2024

GRT-12 TOB-WOND-13

@@ -70,6 +70,7 @@ contract BondedDisputeModule is Module, IBondedDisputeModule {
_amount: _params.bondSize
});
} else if (_status == IOracle.DisputeStatus.Won) {
if (_dispute.proposer != _response.proposer) revert BondedDisputeModule_OnlyResponseProposer();
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would call it BondedDisputeModule_SelfDispute().

Also add tests for this case

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don't see why call it self because this happens when you try to change the address it receives but oka.

Copy link
Member

@0xJabberwock 0xJabberwock Jul 11, 2024

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Indeed, what matters is that the proposer in the IOracle.Response struct is expected to be equal to the same in the IOracle.Dispute struct, despite being arbitrarily inputted by the caller. The fact that someone might dispute himself is not the focus of the issue and apparently is not affected by the reversion above.

Copy link
Member

@0xJabberwock 0xJabberwock left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Shouldn't this issue be validated in Oracle.disputeResponse()?

@0xShaito
Copy link
Member

Shouldn't this issue be validated in Oracle.disputeResponse()?

I agree @0xJabberwock. I prefer if we do it in the oracle!

@ashitakah ashitakah closed this Jul 12, 2024
@ashitakah ashitakah deleted the fix/disputer-address branch July 12, 2024 22:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants