Cross-chain/base: v1.0.1

The release of cross-chain/base/v1.0.1 provides a fix to L2WormholeGateway implementation contract to mitigate the problem described by the GHSA-54q9-r92x-944r security advisory.

L2TBTC and L2WormholeGateway proxy contract addresses remain the same:

• L2TBTC: 0x236aa50979D5f3De3Bd1Eeb40E81137F22ab794b
• L2WormholeGateway: 0x09959798B95d00a3183d20FaC298E4594E599eab

The new L2WormholeGateway implementation contract address is 0x00a5504efb14373faf38cb6ab4fc03fdb7762ebe.

The NPM package is available in the NPM registry as @keep-network/tbtc-v2-base@1.0.1

---

The commit hash for clean builds is 94d4d515a3e50a2db3129120bd74226003f24a18.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @tomaszslabon
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf81ABMv Ry9e4HWuKVjat8s kP3zer2qVFKQDDL f1oGvP3GT6HwElV LCjtRlOygUowTp2 NcxeHCnu5yzbV0z 6ioaa24t3M4BvrN GvtvNfHNiyYsO3y sLd6igXQ788vb9h N7mIrmkFucyVSVL ITqjZ0Q2cXxpV21 hhiqVxxbKBDK23c . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9bIqmEP BheMV7SH6raJVZZ jjMK4FwitF3rOwV BJ6SOJR7A0QifSv KHa9yLLo6KEnkXn ETTZp0ih3wM7V6E cuGrYrzIbfPw8np UMZX6qMxLqIm5Fj rruDhbLBeVxgG4e cokDoPG46TDMo8S 0x3Uv0Q2cXxpV21 hhiqVxxbKBDK23c . END KEYBASE SALTPACK SIGNED MESSAGE.

Cross-chain/arbitrum: v1.0.2

The release of cross-chain/arbitrum/v1.0.2 provides a fix to L2WormholeGateway implementation contract to mitigate the problem described by the GHSA-54q9-r92x-944r security advisory.

L2TBTC and L2WormholeGateway proxy contract addresses remain the same:

• L2TBTC: 0x6c84a8f1c29108f47a79964b5fe888d4f4d0de40
• L2WormholeGateway: 0x1293a54e160D1cd7075487898d65266081A15458

The new L2WormholeGateway implementation contract address is 0xaac423edc4e3ee9ef81517e8093d52737165b71f.

The NPM package is available in the NPM registry as @keep-network/tbtc-v2-arbitrum@1.0.2

---

The commit hash for clean builds is b512900b56c278a523cf05223281d7666a812475.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @tomaszslabon
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7xdHzK Gm9BtmKb2FhcVia 1x14PuUuG7fVaLE jQhGdMxCf7GUeAq agBL4JzKHIgxYW4 mVrXyQJnuMEUAG4 Yeurl36O5yHdwJe 77W5IxkUawOPVo2 4fjNHwgNS63yUVf r5vApMv8C2G9kMZ W8giUzgi6okquCl efVxS1vm9kz7W0i oP609IOYPA1voYk eVkPd0Q2qh2Pgy7 pznuaXjt40H4m4D . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9Zy9txn pdWWJTUnb25dIrL 4LIJAQZBUjjDvbf 9YsWZTdplc08vJt yO8z1BLReZWXXnM AySEFHW0chcuGf0 vBmhP5bi7RyqEb1 fXrXwjO875PEp5z YZyZ9DAb9AjBEEL RoHx9a0WDf2b2uF EZ6c10Q2qh2Pgy7 pznuaXjt40H4m4D . END KEYBASE SALTPACK SIGNED MESSAGE.

Typescript: v2.0.0

typescript/v2.0.0 is the next release of the TypeScript SDK library for interacting with tBTC v2 smart contracts on the Ethereum chains.

This release brings a massive refactoring of the library and a lot of changes around the public API. This release is not backward compatible with v1.x.x versions and requires significant adjustments during migration.

---

The NPM package is available on the NPM registry as @keep-network/tbtc-v2.ts@2.0.0.

Note: Starting from this release, chain configurations are embedded within the library. That means goerli and mainnet tags will be no longer published to NPM. From now on, the latest tag should be considered the latest stable version, and the development tag denotes the unstable version exposing recent features

---

The commit hash for clean builds is 52307fe6053768056fd7317d690e8b9ac4933a27.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @michalsmiarowski
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7SMgAL 5NY1277Utw5mA8i 1L9QkD7NpCS6kJU UaLrqKt0dAx3dDi wLV8ynRqWmeONpe hrIQLn9JNfbKfGA z2leTsqBJ07b7Om lh1XT5ydxbrc3G9 tCMl4IHgBBCk01H DG6cXvOetooJMu3 dPeoUFhe76RL2aL fbsKw8qeMNqdIO9 QvP5jVSnkrTA10w Mb26z0SjzJK4Gpm YKaj4xLj7vQd32d . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9aIA4cJ HGRXAm89w1CQiXi QPC4MOjolWqqCuV 9UOtEmuNGuCQpsr bNbU5OfMHQKnd9u Jdl3k3nlDDBY7HT rbctzIsbfGHiXW1 4pKQQdIpASvmTrS 6TfslEB98k2MiLS ybZULW18XblFrKe cpzCD0SjzJK4Gpm YKaj4xLj7vQd32d . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version 2.0.0 can be found in the corresponding typescript/v2.0.0 milestone.

Typescript: v1.4.0

typescript/v1.4.0 is the next release of the TypeScript library for interacting with tBTC v2 smart contracts on the Ethereum mainnet.

This release is a major leap toward making the library more stable and developer-friendly. The most important changes are:

• Removing the problematic bcoin and bcrypto dependencies in favor of bitcoinjs-lib
• Adding support for Node 18 LTS

Important note: Some changes made during the bcoin -> bitcoinjs-lib transition are not backward compatible and may require slight adjustments in the client code. This is the last release before the breaking v2.0.0 version landing soon. This release is supposed to be used by clients that can't migrate to v2.0.0 immediately but want to use tbtc-v2.ts with the latest Node and without the problematic bcoin dependency.

---

The NPM package is available on the NPM registry as @keep-network/tbtc-v2.ts@1.4.0.

---

The commit hash for clean builds is 23cc3a6ba9851d9cc274139f0a5d4a4d8690a43c.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @michalsmiarowski
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk7SMgAL 5NY1277Utw5mA8i 1L9QkD7NpCS6kJU UaLrqKt0dBEDgdt TKPsKogJlC1SEpE a33TqWlwaMqGtJL ReW9RKWLOUNSc0t ikaWAwEtBceqYbo jYeq69vDhVKwUHE PQEWo0dpwBUI7HG HwzcwG05oEE51SB gfISxALw5RyyNM3 nLzttBRKoA9tmmR YdtWF0TmZtkl0Cf CNEitrgs0pSYGO3 . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9a3f3V7 Xwf6G5smasZX0pX oIwpcwBSoqX9kK9 FRccI1XVfdtghxL beLBGgHjpOHzzbK 3tqAr5I6oAijgJ3 3BFUIPJzy3txoeY mLIGn3YE9LCTSkS C8URKVlYe0Ab7CB 8UDylAWXhr3S1xA o1gtX0TmZtkl0Cf CNEitrgs0pSYGO3 . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version 1.4.0 can be found in the corresponding typescript/v1.4.0 milestone.

Cross-chain/solana: v1.0.0

The release of cross-chain/solana/v1.0.0 is one of the steps to facilitate the integration of Bitcoin into Solana using the Wormhole cross-chain contracts.
This implementation contains the deployment of two upgradeable programs tbtc and wormhole_gateway. Contract addresses are as follows:

• tbtc : Gj93RRt6QB7FjmyokAD5rcMAku7pq3Fk2Aa8y6nNbwsV
• wormhole_gateway : 87MEvHZCXE3ML5rrmh5uX1FbShHmRXXS32xJDGbQ7h5t
• TBTC token : 6DNSN2BJsaPFdFFc1zP37kkeNe4Usc1Sqkzr9C9vPWcU

The wormhole_gateway program is authorized to mint TBTC, and can wrap and unwrap Wormhole-specific TBTC representation into the Solana's canonical TBTC token.
Authority of these two contracts has been set to the Threshold Council Multisig 814TqVmhQGKB3srSLRuMcH6m8qWFHRSbNpRxC5Xnador

The NPM package is available in the NPM registry as @keep-network/tbtc-v2-solana.

---

The commit hash for clean builds is 59af02b1549c858d58f71e6af314c79baa868596.

Signatures of commit hash from the development team (verified in the Keybase app):

• @dimpar
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkEUJD61 aS5dXdI0P9hkT7A V1KLgryVhYq77Eh HjVwI1gm0oq9gyT 9jw858wR27MiTdw ykeaBukKQflGqEA 11PYXeQ6Z8VS9mp OHVJpPNUYJobrDd LHuYKTiiArCrSFu EZx3fK3LLXjw46r ymZBFnGnZkfWPcB iOrdel2UzwY9EOo yLbk4IiVQYPYBYM KdGmz0SDSnzi71I RcezoZVoEJI5ot4 . END KEYBASE SALTPACK SIGNED MESSAGE.

• @pdyraga
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk8SRO9e gN94erb57G43YvY asc2ypx7KtJhJpq tOozFkj38oIIGQl IzmuOq2pJqIbx4M Y8mDuTuKg8demf6 mIa6mF7t4sgiM25 mJazN6bV6HE8SPm CCrdSjBYSXpYtDs TKWi24FfZ44rYmB OvvRQDAZR7PXdOl jSd2IZrBdZRbMZV 68XQtQPtL04H8pO nvNrh0SDSnzi71I RcezoZVoEJI5ot4 . END KEYBASE SALTPACK SIGNED MESSAGE.

Cross-chain/base: v1.0.0

The release of cross-chain/base/v1.0.0 is one of the steps to facilitate the integration of Bitcoin into Base using the Wormhole cross-chain contracts.
This implementation involves the deployment of two upgradeable generic contracts from the tbtc-v2 project. These contract artifacts are named BaseTBTC and BaseWormholeGateway in the NPM package. They were deployed behind the OpenZeppelin transparent proxy and their contract addresses are as follows:

• BaseTBTC (L2TBTC): 0x236aa50979D5f3De3Bd1Eeb40E81137F22ab794b
• BaseWormholeGateway (L2WormholeGateway): 0x09959798B95d00a3183d20FaC298E4594E599eab

The BaseWormholeGateway smart contract is authorized to mint BaseTBTC, and can wrap and unwrap Wormhole-specific tBTC representation into the canonical BaseTBTC token.
Ownership, including ProxyAdmin, of these two contracts has been transferred to the Threshold Council (0x518385dd31289F1000fE6382b0C65df4d1Cd3bfC)

The NPM package is available in the NPM registry as @keep-network/tbtc-v2-base.

---

The commit hash for clean builds is a36710602f8faedd54e2e913d5c3ee18108060a8.

Signatures of commit hash from the development team (verified in the Keybase app):

• @piotrd
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk8SRO9e gN94erb57G43YvY asc2ypx7KtJhJpq tOozFkj38oceSKW AQQLIFSgZKZqGNo ePXITJPB5VNmua1 jO1QJd8cH7vS66Y jIXkYWihWPfVZRY VOwRznFb1QQcqg4 0W06m0mvFJnw9Ed as8JHoj1WUNvAlw cGOlPgwO7mFNd8p wIckHBmAWWCcFQy U6kcT0PWpNvNahj 7fEDYBrf7Y5JCoq . END KEYBASE SALTPACK SIGNED MESSAGE.

• @nkuba
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkUgHswq LONGnytauGuQ68W zKcm0YTewHXEGd3 2M8FiSegAUgzWZP 3hcsGaL42cGRd6w tQygYfPaIdpvwxY R0MGzltdZvWdx17 2mCN7SKTBlJ72X3 i8qN8hjXz3sK0Dg dowI5FjCYoP8l2J 0kX5fygssZdLlLE Osi3F0yYF4VPqNw WpPt7SBNmWur3V7 r6dXV0PWpNvNahj 7fEDYBrf7Y5JCoq . END KEYBASE SALTPACK SIGNED MESSAGE.

Typescript: v1.3.0

typescript/v1.3.0 is the next release of the TypeScript library for interacting with tBTC v2 smart contracts on the Ethereum mainnet.

This release includes changes necessary to support redemptions.

---

The NPM package is available on the NPM registry as @keep-network/tbtc-v2.ts@1.3.0.

---

The commit hash for clean builds is 9a3fba92a78a4964282684689c90676ed721be28.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @nkuba
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkUgHswq LONGnytauGuQ68W zKcm0YTewHXEGd3 2M8FiSegATuTY3b rzxNXqp6gI1M0re Amji32aL2iEFUwA 6CRx7wPby2mQOqb cAFihIWYdMFuYow a9XVkw1lGc5705h k9oinEPGWxAaL2A Uf3WN4SY3iE45dr 6cvUqP6GY10wn7n ZKXNHsF4FjBIy38 SLbBU0S8HzlXfUE A3rCbN2xi3Ms9Y8 . END KEYBASE SALTPACK SIGNED MESSAGE.

• @lukasz-zimnoch
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk90sDpX wIX07Cfy2Yz31Xq 8mliRvTpoVIDeBV VZiP1JZd9Zrh96p qrtiqMCBjGHFzHq KYv5KR14Nv8UgKD 9ENCUzF5kuqvARJ z4CoKQpiE5inx6R bc83elav8bXRZg7 co6lFmLPLgFHVOT dOXmjVSejcoHGRY mwvoSfeDzgXM2O0 JPHsMADmcsOBHIF mjfzI0S8HzlXfUE A3rCbN2xi3Ms9Y8 . END KEYBASE SALTPACK SIGNED MESSAGE.

---

The complete set of work for version 1.3.0 can be found in the corresponding typescript/v1.3.0 milestone.

Solidity: v1.5.0 (Mainnet)

solidity/v1.5.0 is the release of the WalletCoordinator Solidity smart contract upgrade.

The upgrade of WalletCoordinator contract adds support for redemptions coordination of the off-chain wallet members.

WalletCoordinator contract has been deployed as an upgradeable proxy at 0x64EA4b84e2BdfD313428b96658260E495a420093 with implementation at 0x10Fb5943E2F4F67Ee6a533DaE49B6d4cC443ffE5.

The NPM package is available in the NPM registry as @keep-network/tbtc-v2@1.5.0.

---

The commit hash for clean builds is 6518df06e06f5455ee697a85f2ba5062d07aefb3.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @nkuba
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkUgHswq LONGnytauGuQ68W zKcm0YTewHXEGd3 2M8FiSegAUXnPi3 EyXV87akNTyyRwG PxhBgQfTLObWuLE RloLlmChPJCTSQX ykLGzMg4FXu4HaV CFucGs3cAzz9Hsv lV6oJCtCyIybvms GTAwLntMvKs6Cqo GtJJSSO1jJBeU51 55uG6zYGxX1tJws wGq0n0TAHAS3LDY bPllmpWujHmJRwp . END KEYBASE SALTPACK SIGNED MESSAGE.

• @pdyraga
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk8SRO9e gN94erb57G43YvY asc2ypx7KtJhJpq tOozFkj38okfX7Z FGhoPeIc3HPrJ7v f9DAIuYlRKqZ3ua CKtgltFhyreQBrb BCeKjowe8tIalBF x8PsQqGIIVubksc PMMno5tgDk8oguw 1crZ6rIA52nOgnH TzgsX4UKBdcugyi ildsps8643MGK9i m8gDJ0TAHAS3LDY bPllmpWujHmJRwp . END KEYBASE SALTPACK SIGNED MESSAGE.

---

Finally, note that the full set of work that went into the solidity/v1.5.0 version can be found in the corresponding solidity/v1.5.0 milestone.

Solidity: v1.4.0 (Mainnet)

solidity/v1.4.0 is the release of the WalletCoordinator Solidity smart contract. The WalletCoordinator contract aims to facilitate the coordination of the off-chain wallet members during complex multi-chain wallet operations like deposit sweeping, redemptions, or moving funds. Such processes involve various moving parts and many steps that each individual wallet member must do. Given the distributed nature of the off-chain wallet software, full off-chain implementation is challenging and prone to errors, especially byzantine faults. This contract provides a single and reliable on-chain coordination point thus taking the riskiest part out of the off-chain software. The off-chain wallet members can focus on the core tasks and do not bother about electing a trusted coordinator or aligning internal states using complex consensus algorithms.

WalletCoordinator contract has been deployed as an upgradeable proxy at 0x64EA4b84e2BdfD313428b96658260E495a420093 with implementation at 0x9eAE6e8e99d27D377F1EA0659b0CB16ce8aD32bA.

The NPM package is available in the NPM registry as @keep-network/tbtc-v2@1.4.0.

---

The commit hash for clean builds is 61082252845533a03fe0040040bedf3eaedec6d3.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @nkuba
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkUgHswq LONGnytauGuQ68W zKcm0YTewHXEGd3 2M8FiSegATUeQUf NAVgaUD7suJQzCX 8UYJHE4wXsnNkpm 345bJ2l5GMkNUSt d8mKBs2rx15o5Qa kaQ66qyitIGxjvq kwmE59EfNFLF3fN DLC4TmKb5mz87Vw JAiFMw1R97BJkAY cczJ4yiAR5fZSZn NnMM00P0FxSDG3O ebLI7qSpzocGTUR . END KEYBASE SALTPACK SIGNED MESSAGE.

• @pdyraga
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk8SRO9e gN94erb57G43YvY asc2ypx7KtJhJpq tOozFkj38oDZa9F Sx3E0opGbky81UP rank3RgI9PwrZrv iG2ehMY7qnprEai uP6nxCRb39E1mye GdW7UCxAEuWphCL N8inTq5Uqgoe7rr xmAODTov9wVwuVk baYbEpRA4fAVBi6 lsxRKtoZgh5LYaT 2Bhgq0P0FxSDG3O ebLI7qSpzocGTUR . END KEYBASE SALTPACK SIGNED MESSAGE.

---

Finally, note that the full set of work that went into the solidity/v1.4.0 version can be found in the corresponding solidity/v1.4.0 milestone.

Solidity: v1.3.1

solidity/v1.3.1 release provides a fix to L2WormholeGateway contract to normalize the amount before bridging it through Wormhole. The amount has to be normalized to eliminate the dust that cannot be bridged with Wormhole due to the decimal shift in the Wormhole Bridge contract.

The NPM package is available in the NPM registry as @keep-network/tbtc-v2@1.3.1.

---

The commit hash for clean builds is f56423d7dff3b4faf90ab255fb89863d6d0f8230.

Signatures of commit hash from the development team (verify these in the Keybase app):

• @nkuba
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zkUgHswq LONGnytauGuQ68W zKcm0YTewHXEGd3 2M8FiSegAUIXnbK HQzyT9S4fLIUDvI t7Wt3FyBM8dI9tI Pvm5IeSfbWTp9C6 G60CYV4vcKZvthE lYF2jKkYBA9yaeG nA2LXnCYoPLN1ZF 4GugwBcVe5NyzJt Uxs9tSIZdi0nN35 b9VfXnmuL69jy87 WlKwk0RblOoUPY2 pNTQJeyeyIUdz3Q . END KEYBASE SALTPACK SIGNED MESSAGE.

• @pdyraga
  BEGIN KEYBASE SALTPACK SIGNED MESSAGE. kXR7VktZdyH7rvq v5weRa0zk8SRO9e gN94erb57G43YvY asc2ypx7KtJhJpq tOozFkj38oHsIFG LLAW9sSp1MnsQ9f awoXo99jYYZb861 puWyMeIPQ95d4kZ 5nCNgQVPiLRrkt2 rMiHtr2dE9nk3iJ ETxqeVaJUMp8hgq iUBe1MnGCDg5lGu 42QTcHW6mtfgkdR yoxOGLJq5qeUkDb UUabS0RblOoUPY2 pNTQJeyeyIUdz3Q . END KEYBASE SALTPACK SIGNED MESSAGE.

---

Finally, note that the full set of work that went into the solidity/v1.3.1 version can be found in the corresponding solidity/v1.3.1 milestone.