Skip to content

Security: Payout Precision & Accuracy Fix#2880

Closed
MichaelSovereign wants to merge 19 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/payout-precision
Closed

Security: Payout Precision & Accuracy Fix#2880
MichaelSovereign wants to merge 19 commits intoScottcjn:mainfrom
MichaelSovereign:security-fix/payout-precision

Conversation

@MichaelSovereign
Copy link
Copy Markdown
Contributor

Summary

This PR fixes a potential floating-point precision vulnerability in the payout validation logic.

Changes

  1. Decimal Migration: Replaced with for all financial calculations and amount quantization. This ensures that small amounts (micro-RTC) are calculated with absolute accuracy, preventing rounding errors that could lead to failed transfers or incorrect fund amounts.
  2. Safe Parsing: Added helper to handle input sanitization using Decimal types.

Closes #7457

@MichaelSovereign MichaelSovereign requested a review from Scottcjn as a code owner May 2, 2026 05:18
@github-actions github-actions Bot added BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) node Node server related tests Test suite changes size/L PR: 201-500 lines labels May 2, 2026
@Scottcjn Scottcjn closed this May 3, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

BCOS-L1 Beacon Certified Open Source tier BCOS-L1 (required for non-doc PRs) node Node server related size/L PR: 201-500 lines tests Test suite changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants