Skip to content

fix: gaps in VerifyOPCM#19073

Merged
smartcontracts merged 12 commits intodevelopfrom
fix/verify-opcm-security-gaps
Feb 5, 2026
Merged

fix: gaps in VerifyOPCM#19073
smartcontracts merged 12 commits intodevelopfrom
fix/verify-opcm-security-gaps

Conversation

@smartcontracts
Copy link
Contributor

Description
Fixes a number of gaps in VerifyOPCM where variables in OPCM deployments could theoretically be manipulated if the deployer address were entirely malicious.

@smartcontracts smartcontracts requested a review from a team as a code owner February 3, 2026 20:56
@codecov
Copy link

codecov bot commented Feb 3, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 81.6%. Comparing base (e28d709) to head (58afe12).
⚠️ Report is 12 commits behind head on develop.

Additional details and impacted files
@@            Coverage Diff             @@
##           develop   #19073     +/-   ##
==========================================
+ Coverage     76.3%    81.6%   +5.2%     
==========================================
  Files          188      133     -55     
  Lines        10943     6913   -4030     
==========================================
- Hits          8359     5646   -2713     
+ Misses        2438     1267   -1171     
+ Partials       146        0    -146     
Flag Coverage Δ
cannon-go-tests-64 ?
contracts-bedrock-tests 81.6% <ø> (-0.1%) ⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 56 files with indirect coverage changes

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@smartcontracts smartcontracts force-pushed the fix/verify-opcm-security-gaps branch from 1dfaaad to e58aa29 Compare February 4, 2026 15:18
smartcontracts and others added 5 commits February 4, 2026 10:57
- Remove documented but unimplemented MIN:<value> check type
- Remove unused _verifyMinValue function
- Add missing env vars to test_verifyOpcmCorrectness_succeeds:
  - EXPECTED_L1_PAO_MULTISIG
  - EXPECTED_CHALLENGER
  - EXPECTED_WITHDRAWAL_DELAY_SECONDS

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
The _verifyZeroOnMainnet check should also be skipped in testing
environments where we can't control the actual chain state.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
Copy link
Member

@JosepBove JosepBove left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@smartcontracts smartcontracts added this pull request to the merge queue Feb 5, 2026
Merged via the queue into develop with commit fe29ae1 Feb 5, 2026
211 checks passed
@smartcontracts smartcontracts deleted the fix/verify-opcm-security-gaps branch February 5, 2026 21:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants