feat(explorer): proof validation security + modern UI refresh#14
Merged
Merged
Conversation
…sholds Security enhancement to prevent fake proof displays: - Reject amounts exceeding DERO hard cap (22M, ~5% buffer above 21M) - Reject amounts that would cause int64 wraparound (>2^63-1) - Use SetUint64 instead of SetInt64 to prevent signed overflow - Verify payload amount matches claimed proof amount - Add comprehensive test coverage for known fake proof amounts Thresholds aligned with HOLOGRAM implementation for consistency.
Complete UI refresh inspired by DERO Foundation's noir theme: - Dark glassmorphism design with jade green accents - Responsive layout optimized for mobile devices - AJAX-based proof form for smooth UX (no page reload) - Block age displayed as human-readable relative time - Fixed epoch-0 timestamp display for Block 0 - User-facing note that payload proofs are display-only - Branded header with DERO hex logo - Updated footer link to DEROFDN/derohe - favicon.svg and logo.png assets Includes explorerlib_test.go for formatBlockAge coverage.
- Replace deprecated go get with git clone + go build workflow - Update GitHub links from deroproject to DEROFDN/derohe - Update explorer link to explorer.derofoundation.org - Remove defunct web wallet link - Add Matrix community channel link - Fix typos and clarify build instructions
3 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
go getwith modern build instructions, update links to DEROFDN/derohe.Details
Proof Verification (
fix(proof))Payload proofs are user-provided display proofs, not consensus-level transaction proofs. This PR adds defensive validation to prevent fake proofs from displaying impossible amounts:
SetUint64instead ofSetInt64to prevent signed overflowExplorer UI (
feat(explorer))Documentation (
docs)git clone+go buildworkflowTest Plan
go test ./proof/...— passesgo test ./cmd/explorer/...— passesNotes
Pre-existing test failures in
walletapiandwalletapi/xswdare unrelated to this PR.