Skip to content

Release: develop -> main#3675

Merged
TaprootFreak merged 1 commit intomainfrom
develop
May 5, 2026
Merged

Release: develop -> main#3675
TaprootFreak merged 1 commit intomainfrom
develop

Conversation

@github-actions
Copy link
Copy Markdown

@github-actions github-actions Bot commented May 5, 2026

Automatic Release PR

This PR was automatically created after changes were pushed to develop.

Commits: 1 new commit(s)

Checklist

  • Review all changes
  • Verify CI passes
  • Approve and merge when ready for production

)

* fix: harden EIP-7702 backend validation in sell confirmation flow (#3672)

- Add cryptographic signature verification for EIP-712 delegation and EIP-7702 authorization
- Validate authorization chainId against expected blockchain
- Wait for transaction receipt before marking request complete
- Add nonce lock to prevent concurrent relayer nonce collisions
- Use pending blockTag for nonce queries

* style: fix prettier formatting

* refactor: extract EIP-712 constants, add address validation, proper HTTP errors

- Extract EIP-712 domain/types to shared constants (DRY, prevents drift)
- Validate authorization.address against DELEGATOR_ADDRESS
- Wrap delegation service errors as BadRequestException in confirmSell()

* fix: remove blanket BadRequestException catch to preserve 5xx alerts
@TaprootFreak TaprootFreak merged commit cdfa0db into main May 5, 2026
7 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant