@aztec/slasher 0.0.1-commit.f2ce05ee → 0.0.1-commit.f5a9928

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (100) hide show
  1. package/README.md +85 -78
  2. package/dest/config.d.ts +1 -1
  3. package/dest/config.d.ts.map +1 -1
  4. package/dest/config.js +35 -29
  5. package/dest/factory/create_facade.d.ts +7 -4
  6. package/dest/factory/create_facade.d.ts.map +1 -1
  7. package/dest/factory/create_facade.js +29 -3
  8. package/dest/factory/create_implementation.d.ts +7 -7
  9. package/dest/factory/create_implementation.d.ts.map +1 -1
  10. package/dest/factory/create_implementation.js +8 -56
  11. package/dest/factory/get_settings.d.ts +4 -4
  12. package/dest/factory/get_settings.d.ts.map +1 -1
  13. package/dest/factory/get_settings.js +3 -3
  14. package/dest/factory/index.d.ts +2 -2
  15. package/dest/factory/index.d.ts.map +1 -1
  16. package/dest/factory/index.js +1 -1
  17. package/dest/generated/slasher-defaults.d.ts +8 -7
  18. package/dest/generated/slasher-defaults.d.ts.map +1 -1
  19. package/dest/generated/slasher-defaults.js +7 -6
  20. package/dest/index.d.ts +6 -4
  21. package/dest/index.d.ts.map +1 -1
  22. package/dest/index.js +5 -3
  23. package/dest/metrics.d.ts +23 -0
  24. package/dest/metrics.d.ts.map +1 -0
  25. package/dest/metrics.js +38 -0
  26. package/dest/null_slasher_client.d.ts +3 -4
  27. package/dest/null_slasher_client.d.ts.map +1 -1
  28. package/dest/null_slasher_client.js +1 -4
  29. package/dest/own_validator_slash_monitor.d.ts +66 -0
  30. package/dest/own_validator_slash_monitor.d.ts.map +1 -0
  31. package/dest/own_validator_slash_monitor.js +172 -0
  32. package/dest/slash_offenses_collector.d.ts +10 -9
  33. package/dest/slash_offenses_collector.d.ts.map +1 -1
  34. package/dest/slash_offenses_collector.js +50 -34
  35. package/dest/slasher_client.d.ts +118 -0
  36. package/dest/slasher_client.d.ts.map +1 -0
  37. package/dest/{tally_slasher_client.js → slasher_client.js} +65 -45
  38. package/dest/slasher_client_facade.d.ts +8 -8
  39. package/dest/slasher_client_facade.d.ts.map +1 -1
  40. package/dest/slasher_client_facade.js +8 -9
  41. package/dest/slasher_client_interface.d.ts +7 -21
  42. package/dest/slasher_client_interface.d.ts.map +1 -1
  43. package/dest/slasher_client_interface.js +1 -4
  44. package/dest/stores/offenses_store.d.ts +12 -12
  45. package/dest/stores/offenses_store.d.ts.map +1 -1
  46. package/dest/stores/offenses_store.js +61 -38
  47. package/dest/watcher.d.ts +8 -1
  48. package/dest/watcher.d.ts.map +1 -1
  49. package/dest/watcher.js +1 -0
  50. package/dest/watchers/attestations_block_watcher.d.ts +26 -13
  51. package/dest/watchers/attestations_block_watcher.d.ts.map +1 -1
  52. package/dest/watchers/attestations_block_watcher.js +76 -61
  53. package/dest/watchers/attested_invalid_proposal_watcher.d.ts +42 -0
  54. package/dest/watchers/attested_invalid_proposal_watcher.d.ts.map +1 -0
  55. package/dest/watchers/attested_invalid_proposal_watcher.js +117 -0
  56. package/dest/watchers/broadcasted_invalid_checkpoint_proposal_watcher.d.ts +38 -0
  57. package/dest/watchers/broadcasted_invalid_checkpoint_proposal_watcher.d.ts.map +1 -0
  58. package/dest/watchers/broadcasted_invalid_checkpoint_proposal_watcher.js +138 -0
  59. package/dest/watchers/checkpoint_equivocation_watcher.d.ts +30 -0
  60. package/dest/watchers/checkpoint_equivocation_watcher.d.ts.map +1 -0
  61. package/dest/watchers/checkpoint_equivocation_watcher.js +69 -0
  62. package/dest/watchers/data_withholding_watcher.d.ts +69 -0
  63. package/dest/watchers/data_withholding_watcher.d.ts.map +1 -0
  64. package/dest/watchers/data_withholding_watcher.js +223 -0
  65. package/package.json +10 -10
  66. package/src/config.ts +42 -29
  67. package/src/factory/create_facade.ts +37 -5
  68. package/src/factory/create_implementation.ts +29 -105
  69. package/src/factory/get_settings.ts +8 -8
  70. package/src/factory/index.ts +1 -1
  71. package/src/generated/slasher-defaults.ts +7 -6
  72. package/src/index.ts +5 -3
  73. package/src/metrics.ts +59 -0
  74. package/src/null_slasher_client.ts +2 -6
  75. package/src/own_validator_slash_monitor.ts +195 -0
  76. package/src/slash_offenses_collector.ts +70 -36
  77. package/src/{tally_slasher_client.ts → slasher_client.ts} +84 -54
  78. package/src/slasher_client_facade.ts +9 -11
  79. package/src/slasher_client_interface.ts +6 -21
  80. package/src/stores/offenses_store.ts +73 -47
  81. package/src/watcher.ts +8 -0
  82. package/src/watchers/attestations_block_watcher.ts +88 -82
  83. package/src/watchers/attested_invalid_proposal_watcher.ts +168 -0
  84. package/src/watchers/broadcasted_invalid_checkpoint_proposal_watcher.ts +192 -0
  85. package/src/watchers/checkpoint_equivocation_watcher.ts +96 -0
  86. package/src/watchers/data_withholding_watcher.ts +257 -0
  87. package/dest/empire_slasher_client.d.ts +0 -190
  88. package/dest/empire_slasher_client.d.ts.map +0 -1
  89. package/dest/empire_slasher_client.js +0 -564
  90. package/dest/stores/payloads_store.d.ts +0 -29
  91. package/dest/stores/payloads_store.d.ts.map +0 -1
  92. package/dest/stores/payloads_store.js +0 -128
  93. package/dest/tally_slasher_client.d.ts +0 -125
  94. package/dest/tally_slasher_client.d.ts.map +0 -1
  95. package/dest/watchers/epoch_prune_watcher.d.ts +0 -39
  96. package/dest/watchers/epoch_prune_watcher.d.ts.map +0 -1
  97. package/dest/watchers/epoch_prune_watcher.js +0 -175
  98. package/src/empire_slasher_client.ts +0 -649
  99. package/src/stores/payloads_store.ts +0 -149
  100. package/src/watchers/epoch_prune_watcher.ts +0 -251
@@ -1,31 +1,40 @@
1
- import { SlotNumber } from '@aztec/foundation/branded-types';
1
+ import { EpochNumber } from '@aztec/foundation/branded-types';
2
2
  import { merge, pick } from '@aztec/foundation/collection';
3
3
  import { createLogger } from '@aztec/foundation/log';
4
4
  import { L2BlockSourceEvents } from '@aztec/stdlib/block';
5
- import { OffenseType } from '@aztec/stdlib/slashing';
5
+ import { getEpochAtSlot } from '@aztec/stdlib/epoch-helpers';
6
+ import { OffenseType, getOffenseTypeName } from '@aztec/stdlib/slashing';
6
7
  import EventEmitter from 'node:events';
7
8
  import { WANT_TO_SLASH_EVENT } from '../watcher.js';
8
9
  const AttestationsBlockWatcherConfigKeys = [
9
- 'slashAttestDescendantOfInvalidPenalty',
10
+ 'slashProposeDescendantOfCheckpointWithInvalidAttestationsPenalty',
10
11
  'slashProposeInvalidAttestationsPenalty'
11
12
  ];
12
13
  /**
13
- * This watcher is responsible for detecting invalid blocks and creating slashing arguments for offenders.
14
- * An invalid block is one that doesn't have enough attestations or has incorrect attestations.
15
- * The proposer of an invalid block should be slashed.
16
- * If there's another block consecutive to the invalid one, its proposer and attestors should also be slashed.
14
+ * Watches the archiver for checkpoints whose publication is itself a slashable offense.
15
+ *
16
+ * Two cases are handled, both targeting the proposer of the offending checkpoint:
17
+ *
18
+ * - Invalid-attestations checkpoint: the proposer published a checkpoint to L1 whose
19
+ * attestations are either insufficient (below quorum) or incorrect (signature from a
20
+ * non-committee member, malformed signature, etc.). Slashed via
21
+ * {@link OffenseType.PROPOSED_INSUFFICIENT_ATTESTATIONS} or
22
+ * {@link OffenseType.PROPOSED_INCORRECT_ATTESTATIONS}.
23
+ *
24
+ * - Descendant of an invalid checkpoint: the proposer published a checkpoint that extends a
25
+ * previously-rejected one. The descendant may itself have valid attestations, but it is still
26
+ * unusable. Triggered by the archiver's `CheckpointBuiltOnInvalidAncestorDetected` event
27
+ * when the descendant has valid attestations (skipped before ingestion). Slashes the descendant's
28
+ * proposer via {@link OffenseType.PROPOSED_DESCENDANT_OF_CHECKPOINT_WITH_INVALID_ATTESTATIONS}.
17
29
  */ export class AttestationsBlockWatcher extends EventEmitter {
18
30
  l2BlockSource;
19
31
  epochCache;
20
32
  log;
21
- // Only keep track of the last N invalid checkpoints
22
- maxInvalidCheckpoints;
23
- // All invalid archive roots seen
24
- invalidArchiveRoots;
25
33
  config;
26
34
  boundHandleInvalidCheckpoint;
27
- constructor(l2BlockSource, epochCache, config){
28
- super(), this.l2BlockSource = l2BlockSource, this.epochCache = epochCache, this.log = createLogger('attestations-block-watcher'), this.maxInvalidCheckpoints = 100, this.invalidArchiveRoots = new Set(), this.boundHandleInvalidCheckpoint = (event)=>{
35
+ boundHandleDescendantOfInvalid;
36
+ constructor(l2BlockSource, epochCache, config, bindings){
37
+ super(), this.l2BlockSource = l2BlockSource, this.epochCache = epochCache, this.boundHandleInvalidCheckpoint = (event)=>{
29
38
  try {
30
39
  this.handleInvalidCheckpoint(event);
31
40
  } catch (err) {
@@ -34,7 +43,15 @@ const AttestationsBlockWatcherConfigKeys = [
34
43
  reason: event.validationResult.reason
35
44
  });
36
45
  }
46
+ }, this.boundHandleDescendantOfInvalid = (event)=>{
47
+ this.handleDescendantOfInvalid(event).catch((err)=>{
48
+ this.log.error('Error handling descendant of invalid checkpoint', err, {
49
+ checkpointNumber: event.checkpoint.checkpointNumber,
50
+ ancestorCheckpointNumber: event.ancestorCheckpointNumber
51
+ });
52
+ });
37
53
  };
54
+ this.log = createLogger('slasher:attestations-block-watcher', bindings);
38
55
  this.config = pick(config, ...AttestationsBlockWatcherConfigKeys);
39
56
  this.log.info('AttestationsBlockWatcher initialized');
40
57
  }
@@ -44,57 +61,24 @@ const AttestationsBlockWatcherConfigKeys = [
44
61
  }
45
62
  start() {
46
63
  this.l2BlockSource.events.on(L2BlockSourceEvents.InvalidAttestationsCheckpointDetected, this.boundHandleInvalidCheckpoint);
64
+ this.l2BlockSource.events.on(L2BlockSourceEvents.DescendentOfInvalidAttestationsCheckpointDetected, this.boundHandleDescendantOfInvalid);
47
65
  return Promise.resolve();
48
66
  }
49
67
  stop() {
50
68
  this.l2BlockSource.events.removeListener(L2BlockSourceEvents.InvalidAttestationsCheckpointDetected, this.boundHandleInvalidCheckpoint);
69
+ this.l2BlockSource.events.removeListener(L2BlockSourceEvents.DescendentOfInvalidAttestationsCheckpointDetected, this.boundHandleDescendantOfInvalid);
51
70
  return Promise.resolve();
52
71
  }
53
72
  /** Event handler for invalid checkpoints as reported by the archiver. Public for testing purposes. */ handleInvalidCheckpoint(event) {
54
73
  const { validationResult } = event;
55
- const checkpoint = validationResult.checkpoint;
56
- // Check if we already have processed this checkpoint, archiver may emit the same event multiple times
57
- if (this.invalidArchiveRoots.has(checkpoint.archive.toString())) {
58
- this.log.trace(`Already processed invalid checkpoint ${checkpoint.checkpointNumber}`);
59
- return;
60
- }
74
+ const { reason, checkpoint } = validationResult;
61
75
  this.log.verbose(`Detected invalid checkpoint ${checkpoint.checkpointNumber}`, {
62
76
  ...checkpoint,
63
77
  reason: validationResult.valid === false ? validationResult.reason : 'unknown'
64
78
  });
65
- // Store the invalid checkpoint
66
- this.addInvalidCheckpoint(event.validationResult.checkpoint);
67
- // Slash the proposer of the invalid checkpoint
68
- this.slashProposer(event.validationResult);
69
- // Check if the parent of this checkpoint is invalid as well, if so, we will slash its attestors as well
70
- this.slashAttestorsOnAncestorInvalid(event.validationResult);
71
- }
72
- slashAttestorsOnAncestorInvalid(validationResult) {
73
- const checkpoint = validationResult.checkpoint;
74
- const parentArchive = checkpoint.lastArchive.toString();
75
- if (this.invalidArchiveRoots.has(parentArchive)) {
76
- const attestors = validationResult.attestors;
77
- this.log.info(`Want to slash attestors of checkpoint ${checkpoint.checkpointNumber} built on invalid checkpoint`, {
78
- ...checkpoint,
79
- ...attestors,
80
- parentArchive
81
- });
82
- this.emit(WANT_TO_SLASH_EVENT, attestors.map((attestor)=>({
83
- validator: attestor,
84
- amount: this.config.slashAttestDescendantOfInvalidPenalty,
85
- offenseType: OffenseType.ATTESTED_DESCENDANT_OF_INVALID,
86
- epochOrSlot: BigInt(SlotNumber(checkpoint.slotNumber))
87
- })));
88
- }
89
- }
90
- slashProposer(validationResult) {
91
- const { reason, checkpoint } = validationResult;
92
- const checkpointNumber = checkpoint.checkpointNumber;
93
- const slot = checkpoint.slotNumber;
79
+ const { checkpointNumber, slotNumber: slot } = checkpoint;
94
80
  const epochCommitteeInfo = {
95
- committee: validationResult.committee,
96
- seed: validationResult.seed,
97
- epoch: validationResult.epoch,
81
+ ...validationResult,
98
82
  isEscapeHatchOpen: false
99
83
  };
100
84
  const proposer = this.epochCache.getProposerFromEpochCommittee(epochCommitteeInfo, slot);
@@ -110,9 +94,48 @@ const AttestationsBlockWatcherConfigKeys = [
110
94
  offenseType: offense,
111
95
  epochOrSlot: BigInt(slot)
112
96
  };
113
- this.log.info(`Want to slash proposer of checkpoint ${checkpointNumber} due to ${reason}`, {
97
+ this.log.info(`Detected invalid attestations checkpoint proposer offense`, {
114
98
  ...checkpoint,
115
- ...args
99
+ reason,
100
+ validator: args.validator.toString(),
101
+ amount: args.amount,
102
+ offenseType: getOffenseTypeName(args.offenseType),
103
+ epochOrSlot: args.epochOrSlot
104
+ });
105
+ this.emit(WANT_TO_SLASH_EVENT, [
106
+ args
107
+ ]);
108
+ }
109
+ /**
110
+ * Event handler for valid-attestations checkpoints that build on a previously-rejected ancestor.
111
+ * The archiver emits this when ingesting the descendant, and we slash its proposer.
112
+ */ async handleDescendantOfInvalid(event) {
113
+ const { checkpoint, ancestorCheckpointNumber, ancestorArchiveRoot } = event;
114
+ const slot = checkpoint.slotNumber;
115
+ const epoch = EpochNumber(getEpochAtSlot(slot, this.epochCache.getL1Constants()));
116
+ const epochCommitteeInfo = await this.epochCache.getCommitteeForEpoch(epoch);
117
+ const proposer = this.epochCache.getProposerFromEpochCommittee({
118
+ ...epochCommitteeInfo,
119
+ epoch
120
+ }, slot);
121
+ if (!proposer) {
122
+ this.log.warn(`No proposer found for invalid descendant checkpoint ${checkpoint.checkpointNumber} at slot ${slot}`);
123
+ return;
124
+ }
125
+ const args = {
126
+ validator: proposer,
127
+ amount: this.config.slashProposeDescendantOfCheckpointWithInvalidAttestationsPenalty,
128
+ offenseType: OffenseType.PROPOSED_DESCENDANT_OF_CHECKPOINT_WITH_INVALID_ATTESTATIONS,
129
+ epochOrSlot: BigInt(slot)
130
+ };
131
+ this.log.info(`Detected invalid descendant checkpoint proposer offense`, {
132
+ ...checkpoint,
133
+ ancestorCheckpointNumber,
134
+ ancestorArchiveRoot: ancestorArchiveRoot.toString(),
135
+ validator: args.validator.toString(),
136
+ amount: args.amount,
137
+ offenseType: getOffenseTypeName(args.offenseType),
138
+ epochOrSlot: args.epochOrSlot
116
139
  });
117
140
  this.emit(WANT_TO_SLASH_EVENT, [
118
141
  args
@@ -131,12 +154,4 @@ const AttestationsBlockWatcherConfigKeys = [
131
154
  }
132
155
  }
133
156
  }
134
- addInvalidCheckpoint(checkpoint) {
135
- this.invalidArchiveRoots.add(checkpoint.archive.toString());
136
- // Prune old entries if we exceed the maximum
137
- if (this.invalidArchiveRoots.size > this.maxInvalidCheckpoints) {
138
- const oldestKey = this.invalidArchiveRoots.keys().next().value;
139
- this.invalidArchiveRoots.delete(oldestKey);
140
- }
141
- }
142
157
  }
@@ -0,0 +1,42 @@
1
+ import type { EpochCacheInterface } from '@aztec/epoch-cache';
2
+ import { SlotNumber } from '@aztec/foundation/branded-types';
3
+ import { type Logger } from '@aztec/foundation/log';
4
+ import type { L2BlockSource } from '@aztec/stdlib/block';
5
+ import type { P2PClient, SlasherConfig } from '@aztec/stdlib/interfaces/server';
6
+ import { type Watcher, type WatcherEmitter } from '../watcher.js';
7
+ declare const AttestedInvalidProposalWatcherConfigKeys: readonly ["slashAttestInvalidCheckpointProposalPenalty"];
8
+ type AttestedInvalidProposalWatcherConfig = Pick<SlasherConfig, (typeof AttestedInvalidProposalWatcherConfigKeys)[number]>;
9
+ type P2PCheckpointAttestationSource = Pick<P2PClient, 'getCheckpointAttestationsForSlot'>;
10
+ type AttestedInvalidProposalWatcherOptions = {
11
+ scanSlotLookback?: number;
12
+ log?: Logger;
13
+ };
14
+ export type InvalidProposalSlotSource = {
15
+ hasInvalidProposals(slot: SlotNumber): boolean;
16
+ hasProposalEquivocation(slot: SlotNumber): boolean;
17
+ };
18
+ declare const AttestedInvalidProposalWatcher_base: new () => WatcherEmitter;
19
+ export declare class AttestedInvalidProposalWatcher extends AttestedInvalidProposalWatcher_base implements Watcher {
20
+ private readonly p2pClient;
21
+ private readonly invalidProposalSlotSource;
22
+ private readonly l2BlockSource;
23
+ private readonly epochCache;
24
+ private readonly log;
25
+ private readonly runningPromise;
26
+ private readonly emittedOffenses;
27
+ private readonly scanSlotLookback;
28
+ private config;
29
+ private lastScannedSlot;
30
+ constructor(p2pClient: P2PCheckpointAttestationSource, invalidProposalSlotSource: InvalidProposalSlotSource, l2BlockSource: Pick<L2BlockSource, 'getSyncedL2SlotNumber'>, epochCache: Pick<EpochCacheInterface, 'getSlotNow' | 'getL1Constants'>, config: AttestedInvalidProposalWatcherConfig, options?: AttestedInvalidProposalWatcherOptions);
31
+ updateConfig(config: Partial<SlasherConfig>): void;
32
+ start(): Promise<void>;
33
+ stop(): Promise<void>;
34
+ scan(): Promise<void>;
35
+ /** Scans a single invalid-proposal slot. */
36
+ scanSlot(slot: SlotNumber): Promise<void>;
37
+ private getSlashArgs;
38
+ private getSlashArgsForAttester;
39
+ private markAsNewOffense;
40
+ }
41
+ export {};
42
+ //# sourceMappingURL=data:application/json;base64,eyJ2ZXJzaW9uIjozLCJmaWxlIjoiYXR0ZXN0ZWRfaW52YWxpZF9wcm9wb3NhbF93YXRjaGVyLmQudHMiLCJzb3VyY2VSb290IjoiIiwic291cmNlcyI6WyIuLi8uLi9zcmMvd2F0Y2hlcnMvYXR0ZXN0ZWRfaW52YWxpZF9wcm9wb3NhbF93YXRjaGVyLnRzIl0sIm5hbWVzIjpbXSwibWFwcGluZ3MiOiJBQUFBLE9BQU8sS0FBSyxFQUFFLG1CQUFtQixFQUFFLE1BQU0sb0JBQW9CLENBQUM7QUFDOUQsT0FBTyxFQUFFLFVBQVUsRUFBRSxNQUFNLGlDQUFpQyxDQUFDO0FBSTdELE9BQU8sRUFBRSxLQUFLLE1BQU0sRUFBZ0IsTUFBTSx1QkFBdUIsQ0FBQztBQUVsRSxPQUFPLEtBQUssRUFBRSxhQUFhLEVBQUUsTUFBTSxxQkFBcUIsQ0FBQztBQUN6RCxPQUFPLEtBQUssRUFBRSxTQUFTLEVBQUUsYUFBYSxFQUFFLE1BQU0saUNBQWlDLENBQUM7QUFNaEYsT0FBTyxFQUE2QyxLQUFLLE9BQU8sRUFBRSxLQUFLLGNBQWMsRUFBRSxNQUFNLGVBQWUsQ0FBQztBQUU3RyxRQUFBLE1BQU0sd0NBQXdDLDBEQUEyRCxDQUFDO0FBTTFHLEtBQUssb0NBQW9DLEdBQUcsSUFBSSxDQUM5QyxhQUFhLEVBQ2IsQ0FBQyxPQUFPLHdDQUF3QyxDQUFDLENBQUMsTUFBTSxDQUFDLENBQzFELENBQUM7QUFFRixLQUFLLDhCQUE4QixHQUFHLElBQUksQ0FBQyxTQUFTLEVBQUUsa0NBQWtDLENBQUMsQ0FBQztBQUUxRixLQUFLLHFDQUFxQyxHQUFHO0lBQzNDLGdCQUFnQixDQUFDLEVBQUUsTUFBTSxDQUFDO0lBQzFCLEdBQUcsQ0FBQyxFQUFFLE1BQU0sQ0FBQztDQUNkLENBQUM7QUFFRixNQUFNLE1BQU0seUJBQXlCLEdBQUc7SUFDdEMsbUJBQW1CLENBQUMsSUFBSSxFQUFFLFVBQVUsR0FBRyxPQUFPLENBQUM7SUFDL0MsdUJBQXVCLENBQUMsSUFBSSxFQUFFLFVBQVUsR0FBRyxPQUFPLENBQUM7Q0FDcEQsQ0FBQzs7QUFFRixxQkFBYSw4QkFBK0IsU0FBUSxtQ0FBMkMsWUFBVyxPQUFPO0lBUzdHLE9BQU8sQ0FBQyxRQUFRLENBQUMsU0FBUztJQUMxQixPQUFPLENBQUMsUUFBUSxDQUFDLHlCQUF5QjtJQUMxQyxPQUFPLENBQUMsUUFBUSxDQUFDLGFBQWE7SUFDOUIsT0FBTyxDQUFDLFFBQVEsQ0FBQyxVQUFVO0lBWDdCLE9BQU8sQ0FBQyxRQUFRLENBQUMsR0FBRyxDQUFTO0lBQzdCLE9BQU8sQ0FBQyxRQUFRLENBQUMsY0FBYyxDQUFpQjtJQUNoRCxPQUFPLENBQUMsUUFBUSxDQUFDLGVBQWUsQ0FBMkQ7SUFDM0YsT0FBTyxDQUFDLFFBQVEsQ0FBQyxnQkFBZ0IsQ0FBUztJQUMxQyxPQUFPLENBQUMsTUFBTSxDQUF1QztJQUNyRCxPQUFPLENBQUMsZUFBZSxDQUF5QjtJQUVoRCxZQUNtQixTQUFTLEVBQUUsOEJBQThCLEVBQ3pDLHlCQUF5QixFQUFFLHlCQUF5QixFQUNwRCxhQUFhLEVBQUUsSUFBSSxDQUFDLGFBQWEsRUFBRSx1QkFBdUIsQ0FBQyxFQUMzRCxVQUFVLEVBQUUsSUFBSSxDQUFDLG1CQUFtQixFQUFFLFlBQVksR0FBRyxnQkFBZ0IsQ0FBQyxFQUN2RixNQUFNLEVBQUUsb0NBQW9DLEVBQzVDLE9BQU8sR0FBRSxxQ0FBMEMsRUFXcEQ7SUFFTSxZQUFZLENBQUMsTUFBTSxFQUFFLE9BQU8sQ0FBQyxhQUFhLENBQUMsR0FBRyxJQUFJLENBR3hEO0lBRU0sS0FBSyxJQUFJLE9BQU8sQ0FBQyxJQUFJLENBQUMsQ0FHNUI7SUFFTSxJQUFJLElBQUksT0FBTyxDQUFDLElBQUksQ0FBQyxDQUUzQjtJQUVZLElBQUksSUFBSSxPQUFPLENBQUMsSUFBSSxDQUFDLENBcUJqQztJQUVELDRDQUE0QztJQUMvQixRQUFRLENBQUMsSUFBSSxFQUFFLFVBQVUsR0FBRyxPQUFPLENBQUMsSUFBSSxDQUFDLENBbUNyRDtJQUVELE9BQU8sQ0FBQyxZQUFZO0lBYXBCLE9BQU8sQ0FBQyx1QkFBdUI7SUFTL0IsT0FBTyxDQUFDLGdCQUFnQjtDQUl6QiJ9
@@ -0,0 +1 @@
1
+ {"version":3,"file":"attested_invalid_proposal_watcher.d.ts","sourceRoot":"","sources":["../../src/watchers/attested_invalid_proposal_watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAI7D,OAAO,EAAE,KAAK,MAAM,EAAgB,MAAM,uBAAuB,CAAC;AAElE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAMhF,OAAO,EAA6C,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7G,QAAA,MAAM,wCAAwC,0DAA2D,CAAC;AAM1G,KAAK,oCAAoC,GAAG,IAAI,CAC9C,aAAa,EACb,CAAC,OAAO,wCAAwC,CAAC,CAAC,MAAM,CAAC,CAC1D,CAAC;AAEF,KAAK,8BAA8B,GAAG,IAAI,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;AAE1F,KAAK,qCAAqC,GAAG;IAC3C,gBAAgB,CAAC,EAAE,MAAM,CAAC;IAC1B,GAAG,CAAC,EAAE,MAAM,CAAC;CACd,CAAC;AAEF,MAAM,MAAM,yBAAyB,GAAG;IACtC,mBAAmB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;IAC/C,uBAAuB,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC;CACpD,CAAC;;AAEF,qBAAa,8BAA+B,SAAQ,mCAA2C,YAAW,OAAO;IAS7G,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,yBAAyB;IAC1C,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAX7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAS;IAC7B,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAA2D;IAC3F,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,MAAM,CAAuC;IACrD,OAAO,CAAC,eAAe,CAAyB;IAEhD,YACmB,SAAS,EAAE,8BAA8B,EACzC,yBAAyB,EAAE,yBAAyB,EACpD,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,uBAAuB,CAAC,EAC3D,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,gBAAgB,CAAC,EACvF,MAAM,EAAE,oCAAoC,EAC5C,OAAO,GAAE,qCAA0C,EAWpD;IAEM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,aAAa,CAAC,GAAG,IAAI,CAGxD;IAEM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAG5B;IAEM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAEY,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAqBjC;IAED,4CAA4C;IAC/B,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAmCrD;IAED,OAAO,CAAC,YAAY;IAapB,OAAO,CAAC,uBAAuB;IAS/B,OAAO,CAAC,gBAAgB;CAIzB"}
@@ -0,0 +1,117 @@
1
+ import { SlotNumber } from '@aztec/foundation/branded-types';
2
+ import { merge, pick } from '@aztec/foundation/collection';
3
+ import { FifoSet } from '@aztec/foundation/fifo-set';
4
+ import { createLogger } from '@aztec/foundation/log';
5
+ import { RunningPromise } from '@aztec/foundation/running-promise';
6
+ import { OffenseType, getOffenseTypeName } from '@aztec/stdlib/slashing';
7
+ import EventEmitter from 'node:events';
8
+ import { WANT_TO_SLASH_EVENT } from '../watcher.js';
9
+ const AttestedInvalidProposalWatcherConfigKeys = [
10
+ 'slashAttestInvalidCheckpointProposalPenalty'
11
+ ];
12
+ const SCAN_SLOT_LAG = 1;
13
+ const DEFAULT_SCAN_SLOT_LOOKBACK = 4;
14
+ const MAX_TRACKED_BAD_ATTESTATIONS = 10_000;
15
+ export class AttestedInvalidProposalWatcher extends EventEmitter {
16
+ p2pClient;
17
+ invalidProposalSlotSource;
18
+ l2BlockSource;
19
+ epochCache;
20
+ log;
21
+ runningPromise;
22
+ emittedOffenses;
23
+ scanSlotLookback;
24
+ config;
25
+ lastScannedSlot;
26
+ constructor(p2pClient, invalidProposalSlotSource, l2BlockSource, epochCache, config, options = {}){
27
+ super(), this.p2pClient = p2pClient, this.invalidProposalSlotSource = invalidProposalSlotSource, this.l2BlockSource = l2BlockSource, this.epochCache = epochCache, this.emittedOffenses = FifoSet.withLimit(MAX_TRACKED_BAD_ATTESTATIONS);
28
+ const constants = epochCache.getL1Constants();
29
+ this.log = options.log ?? createLogger('attested-invalid-proposal-watcher');
30
+ this.config = pick(config, ...AttestedInvalidProposalWatcherConfigKeys);
31
+ this.scanSlotLookback = Math.max(1, options.scanSlotLookback ?? DEFAULT_SCAN_SLOT_LOOKBACK);
32
+ const intervalMs = Math.max(1000, constants.ethereumSlotDuration * 1000 / 4);
33
+ this.runningPromise = new RunningPromise(()=>this.scan(), this.log, intervalMs);
34
+ this.log.info('AttestedInvalidProposalWatcher initialized', {
35
+ scanSlotLookback: this.scanSlotLookback
36
+ });
37
+ }
38
+ updateConfig(config) {
39
+ this.config = merge(this.config, pick(config, ...AttestedInvalidProposalWatcherConfigKeys));
40
+ this.log.verbose('AttestedInvalidProposalWatcher config updated', this.config);
41
+ }
42
+ start() {
43
+ this.runningPromise.start();
44
+ return Promise.resolve();
45
+ }
46
+ stop() {
47
+ return this.runningPromise.stop();
48
+ }
49
+ async scan() {
50
+ const currentSlot = await this.l2BlockSource.getSyncedL2SlotNumber() ?? this.epochCache.getSlotNow();
51
+ // genesis
52
+ if (currentSlot <= SlotNumber(SCAN_SLOT_LAG)) {
53
+ return;
54
+ }
55
+ const newestSlotToConsider = SlotNumber(currentSlot - SCAN_SLOT_LAG);
56
+ const oldestSlot = this.lastScannedSlot === undefined ? SlotNumber(Math.max(0, newestSlotToConsider - this.scanSlotLookback + 1)) : SlotNumber(this.lastScannedSlot + 1);
57
+ if (oldestSlot > newestSlotToConsider) {
58
+ return;
59
+ }
60
+ for(let slot = oldestSlot; slot <= newestSlotToConsider; slot++){
61
+ await this.scanSlot(slot);
62
+ }
63
+ this.lastScannedSlot = newestSlotToConsider;
64
+ }
65
+ /** Scans a single invalid-proposal slot. */ async scanSlot(slot) {
66
+ if (this.invalidProposalSlotSource.hasProposalEquivocation(slot) || !this.invalidProposalSlotSource.hasInvalidProposals(slot)) {
67
+ return;
68
+ }
69
+ let attestations;
70
+ try {
71
+ attestations = await this.p2pClient.getCheckpointAttestationsForSlot(slot);
72
+ } catch (err) {
73
+ this.log.warn('Error getting checkpoint attestations for invalid proposal slot', {
74
+ err,
75
+ slot
76
+ });
77
+ return;
78
+ }
79
+ const slashArgs = attestations.map((attestation)=>this.getSlashArgs(slot, attestation)).filter((args)=>args !== undefined).filter((args)=>this.markAsNewOffense(args));
80
+ if (slashArgs.length === 0) {
81
+ return;
82
+ }
83
+ this.log.info('Detected attestations to invalid checkpoint proposal', {
84
+ slot,
85
+ offenses: slashArgs.map((args)=>({
86
+ validator: args.validator.toString(),
87
+ amount: args.amount,
88
+ offenseType: getOffenseTypeName(args.offenseType),
89
+ epochOrSlot: args.epochOrSlot
90
+ }))
91
+ });
92
+ this.emit(WANT_TO_SLASH_EVENT, slashArgs);
93
+ }
94
+ getSlashArgs(slot, attestation) {
95
+ const attester = attestation.getSender();
96
+ if (!attester) {
97
+ this.log.warn('Cannot slash checkpoint attestation with invalid signature', {
98
+ slot,
99
+ archive: attestation.archive.toString()
100
+ });
101
+ return undefined;
102
+ }
103
+ return this.getSlashArgsForAttester(slot, attester);
104
+ }
105
+ getSlashArgsForAttester(slot, attester) {
106
+ return {
107
+ validator: attester,
108
+ amount: this.config.slashAttestInvalidCheckpointProposalPenalty,
109
+ offenseType: OffenseType.ATTESTED_TO_INVALID_CHECKPOINT_PROPOSAL,
110
+ epochOrSlot: BigInt(slot)
111
+ };
112
+ }
113
+ markAsNewOffense(args) {
114
+ const key = `${args.validator.toString()}-${args.offenseType}-${args.epochOrSlot}`;
115
+ return this.emittedOffenses.addIfAbsent(key);
116
+ }
117
+ }
@@ -0,0 +1,38 @@
1
+ import type { EpochCacheInterface } from '@aztec/epoch-cache';
2
+ import { SlotNumber } from '@aztec/foundation/branded-types';
3
+ import type { L2BlockSource } from '@aztec/stdlib/block';
4
+ import type { P2PClient, SlasherConfig } from '@aztec/stdlib/interfaces/server';
5
+ import { type Watcher, type WatcherEmitter } from '../watcher.js';
6
+ declare const BroadcastedInvalidCheckpointProposalWatcherConfigKeys: readonly ["slashBroadcastedInvalidCheckpointProposalPenalty"];
7
+ type BroadcastedInvalidCheckpointProposalWatcherConfig = Pick<SlasherConfig, (typeof BroadcastedInvalidCheckpointProposalWatcherConfigKeys)[number]>;
8
+ type P2PProposalsForSlotSource = Pick<P2PClient, 'getProposalsForSlot'>;
9
+ declare const BroadcastedInvalidCheckpointProposalWatcher_base: new () => WatcherEmitter;
10
+ /** Detects truncated-checkpoint proposal offenses from retained signed P2P proposals. */
11
+ export declare class BroadcastedInvalidCheckpointProposalWatcher extends BroadcastedInvalidCheckpointProposalWatcher_base implements Watcher {
12
+ private readonly p2pClient;
13
+ private readonly l2BlockSource;
14
+ private readonly epochCache;
15
+ private readonly log;
16
+ private readonly runningPromise;
17
+ private readonly emittedOffenses;
18
+ private readonly scanSlotLookback;
19
+ private config;
20
+ private lastScannedSlot;
21
+ constructor(p2pClient: P2PProposalsForSlotSource, l2BlockSource: Pick<L2BlockSource, 'getSyncedL2SlotNumber'>, epochCache: Pick<EpochCacheInterface, 'getSlotNow' | 'getL1Constants'>, config: BroadcastedInvalidCheckpointProposalWatcherConfig, scanSlotLookback?: number);
22
+ updateConfig(config: Partial<BroadcastedInvalidCheckpointProposalWatcherConfig>): void;
23
+ start(): Promise<void>;
24
+ stop(): Promise<void>;
25
+ /**
26
+ * Scans newly closed slots, plus a small lookback for late-arriving proposals. Anchors
27
+ * `currentSlot` at the archiver's last synced L2 slot.
28
+ */
29
+ scan(): Promise<void>;
30
+ /** Scans a single slot. Public for tests. */
31
+ scanSlot(slot: SlotNumber): Promise<void>;
32
+ private getSlashArgsForProposals;
33
+ private findOffenders;
34
+ private getSignedBlocksBySigner;
35
+ private markAsNewOffense;
36
+ }
37
+ export {};
38
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1 @@
1
+ {"version":3,"file":"broadcasted_invalid_checkpoint_proposal_watcher.d.ts","sourceRoot":"","sources":["../../src/watchers/broadcasted_invalid_checkpoint_proposal_watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,UAAU,EAAE,MAAM,iCAAiC,CAAC;AAM7D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACzD,OAAO,KAAK,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAMhF,OAAO,EAA6C,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7G,QAAA,MAAM,qDAAqD,+DAEjD,CAAC;AAKX,KAAK,iDAAiD,GAAG,IAAI,CAC3D,aAAa,EACb,CAAC,OAAO,qDAAqD,CAAC,CAAC,MAAM,CAAC,CACvE,CAAC;AAGF,KAAK,yBAAyB,GAAG,IAAI,CAAC,SAAS,EAAE,qBAAqB,CAAC,CAAC;;AAOxE,yFAAyF;AACzF,qBAAa,2CACX,SAAQ,gDACR,YAAW,OAAO;IAUhB,OAAO,CAAC,QAAQ,CAAC,SAAS;IAC1B,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAV7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA2E;IAC/F,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAiB;IAChD,OAAO,CAAC,QAAQ,CAAC,eAAe,CAAkB;IAClD,OAAO,CAAC,QAAQ,CAAC,gBAAgB,CAAS;IAC1C,OAAO,CAAC,MAAM,CAAoD;IAClE,OAAO,CAAC,eAAe,CAAyB;IAEhD,YACmB,SAAS,EAAE,yBAAyB,EACpC,aAAa,EAAE,IAAI,CAAC,aAAa,EAAE,uBAAuB,CAAC,EAC3D,UAAU,EAAE,IAAI,CAAC,mBAAmB,EAAE,YAAY,GAAG,gBAAgB,CAAC,EACvF,MAAM,EAAE,iDAAiD,EACzD,gBAAgB,SAA6B,EAiB9C;IAEM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,iDAAiD,CAAC,GAAG,IAAI,CAG5F;IAEM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAG5B;IAEM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAE3B;IAED;;;OAGG;IACU,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAejC;IAED,6CAA6C;IAChC,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,OAAO,CAAC,IAAI,CAAC,CAiBrD;IAED,OAAO,CAAC,wBAAwB;IAWhC,OAAO,CAAC,aAAa;IAkCrB,OAAO,CAAC,uBAAuB;IAe/B,OAAO,CAAC,gBAAgB;CAIzB"}
@@ -0,0 +1,138 @@
1
+ import { SlotNumber } from '@aztec/foundation/branded-types';
2
+ import { merge, pick } from '@aztec/foundation/collection';
3
+ import { FifoSet } from '@aztec/foundation/fifo-set';
4
+ import { createLogger } from '@aztec/foundation/log';
5
+ import { RunningPromise } from '@aztec/foundation/running-promise';
6
+ import { OffenseType, getOffenseTypeName } from '@aztec/stdlib/slashing';
7
+ import EventEmitter from 'node:events';
8
+ import { WANT_TO_SLASH_EVENT } from '../watcher.js';
9
+ const BroadcastedInvalidCheckpointProposalWatcherConfigKeys = [
10
+ 'slashBroadcastedInvalidCheckpointProposalPenalty'
11
+ ];
12
+ const SCAN_SLOT_LAG = 1;
13
+ const DEFAULT_SCAN_SLOT_LOOKBACK = 4;
14
+ /** Detects truncated-checkpoint proposal offenses from retained signed P2P proposals. */ export class BroadcastedInvalidCheckpointProposalWatcher extends EventEmitter {
15
+ p2pClient;
16
+ l2BlockSource;
17
+ epochCache;
18
+ log;
19
+ runningPromise;
20
+ emittedOffenses;
21
+ scanSlotLookback;
22
+ config;
23
+ lastScannedSlot;
24
+ constructor(p2pClient, l2BlockSource, epochCache, config, scanSlotLookback = DEFAULT_SCAN_SLOT_LOOKBACK){
25
+ super(), this.p2pClient = p2pClient, this.l2BlockSource = l2BlockSource, this.epochCache = epochCache, this.log = createLogger('broadcasted-invalid-checkpoint-proposal-watcher');
26
+ const constants = epochCache.getL1Constants();
27
+ this.config = pick(config, ...BroadcastedInvalidCheckpointProposalWatcherConfigKeys);
28
+ this.scanSlotLookback = Math.max(1, scanSlotLookback);
29
+ // Bound emitted offenses to the number of slots we rescan. This watcher currently tracks one offense type,
30
+ // and at most one offense of that type can be emitted per slot.
31
+ const offenseTypes = 1;
32
+ this.emittedOffenses = FifoSet.withLimit(offenseTypes * this.scanSlotLookback);
33
+ const intervalMs = Math.max(1000, constants.ethereumSlotDuration * 1000 / 4);
34
+ this.runningPromise = new RunningPromise(()=>this.scan(), this.log, intervalMs);
35
+ this.log.info('BroadcastedInvalidCheckpointProposalWatcher initialized', {
36
+ scanSlotLookback: this.scanSlotLookback
37
+ });
38
+ }
39
+ updateConfig(config) {
40
+ this.config = merge(this.config, pick(config, ...BroadcastedInvalidCheckpointProposalWatcherConfigKeys));
41
+ this.log.verbose('BroadcastedInvalidCheckpointProposalWatcher config updated', this.config);
42
+ }
43
+ start() {
44
+ this.runningPromise.start();
45
+ return Promise.resolve();
46
+ }
47
+ stop() {
48
+ return this.runningPromise.stop();
49
+ }
50
+ /**
51
+ * Scans newly closed slots, plus a small lookback for late-arriving proposals. Anchors
52
+ * `currentSlot` at the archiver's last synced L2 slot.
53
+ */ async scan() {
54
+ const currentSlot = await this.l2BlockSource.getSyncedL2SlotNumber() ?? this.epochCache.getSlotNow();
55
+ if (currentSlot <= SlotNumber(SCAN_SLOT_LAG)) {
56
+ return;
57
+ }
58
+ const newestSlotToConsider = SlotNumber(currentSlot - 1 - SCAN_SLOT_LAG);
59
+ const oldestLookbackSlot = SlotNumber(Math.max(0, newestSlotToConsider - this.scanSlotLookback + 1));
60
+ const oldestUnscannedSlot = this.lastScannedSlot === undefined ? oldestLookbackSlot : SlotNumber(this.lastScannedSlot + 1);
61
+ const oldestSlot = SlotNumber(Math.min(oldestLookbackSlot, oldestUnscannedSlot));
62
+ for(let slot = oldestSlot; slot <= newestSlotToConsider; slot++){
63
+ await this.scanSlot(SlotNumber(slot));
64
+ }
65
+ this.lastScannedSlot = newestSlotToConsider;
66
+ }
67
+ /** Scans a single slot. Public for tests. */ async scanSlot(slot) {
68
+ const proposals = await this.p2pClient.getProposalsForSlot(slot);
69
+ const slashArgs = this.getSlashArgsForProposals(slot, proposals).filter((args)=>this.markAsNewOffense(args));
70
+ if (slashArgs.length === 0) {
71
+ return;
72
+ }
73
+ this.log.info(`Detected broadcasted invalid checkpoint proposal offense`, {
74
+ slot,
75
+ offenses: slashArgs.map((args)=>({
76
+ validator: args.validator.toString(),
77
+ amount: args.amount,
78
+ offenseType: getOffenseTypeName(args.offenseType),
79
+ epochOrSlot: args.epochOrSlot
80
+ }))
81
+ });
82
+ this.emit(WANT_TO_SLASH_EVENT, slashArgs);
83
+ }
84
+ getSlashArgsForProposals(slot, proposals) {
85
+ const offenders = this.findOffenders(proposals.blockProposals, proposals.checkpointProposals);
86
+ // we expect one proposer per slot today.
87
+ return [
88
+ ...offenders.values()
89
+ ].map((validator)=>({
90
+ validator,
91
+ amount: this.config.slashBroadcastedInvalidCheckpointProposalPenalty,
92
+ offenseType: OffenseType.BROADCASTED_INVALID_CHECKPOINT_PROPOSAL,
93
+ epochOrSlot: BigInt(slot)
94
+ }));
95
+ }
96
+ findOffenders(blockProposals, checkpointProposals) {
97
+ const blocksBySigner = this.getSignedBlocksBySigner(blockProposals);
98
+ const offenders = new Map();
99
+ for (const checkpoint of checkpointProposals){
100
+ const checkpointSigner = checkpoint.getSender();
101
+ if (!checkpointSigner) {
102
+ continue;
103
+ }
104
+ const signerKey = checkpointSigner.toString();
105
+ const signerBlocks = blocksBySigner.get(signerKey) ?? [];
106
+ const terminalBlocks = signerBlocks.filter(({ proposal })=>proposal.slotNumber === checkpoint.slotNumber && proposal.archive.equals(checkpoint.archive));
107
+ if (terminalBlocks.length === 0) {
108
+ continue;
109
+ }
110
+ const hasTruncatedHigherBlock = terminalBlocks.some((terminalBlock)=>signerBlocks.some(({ proposal })=>proposal.slotNumber === checkpoint.slotNumber && proposal.indexWithinCheckpoint > terminalBlock.proposal.indexWithinCheckpoint));
111
+ if (hasTruncatedHigherBlock) {
112
+ offenders.set(signerKey, checkpointSigner);
113
+ }
114
+ }
115
+ return offenders;
116
+ }
117
+ getSignedBlocksBySigner(blockProposals) {
118
+ const blocksBySigner = new Map();
119
+ for (const proposal of blockProposals){
120
+ const signer = proposal.getSender();
121
+ if (!signer) {
122
+ continue;
123
+ }
124
+ const signerKey = signer.toString();
125
+ const signerBlocks = blocksBySigner.get(signerKey) ?? [];
126
+ signerBlocks.push({
127
+ proposal,
128
+ signer
129
+ });
130
+ blocksBySigner.set(signerKey, signerBlocks);
131
+ }
132
+ return blocksBySigner;
133
+ }
134
+ markAsNewOffense(args) {
135
+ const key = `${args.validator.toString()}-${args.offenseType}-${args.epochOrSlot}`;
136
+ return this.emittedOffenses.addIfAbsent(key);
137
+ }
138
+ }
@@ -0,0 +1,30 @@
1
+ import type { EpochCacheInterface } from '@aztec/epoch-cache';
2
+ import { type CheckpointEquivocationDetectedEvent, type L2BlockSourceEventEmitter } from '@aztec/stdlib/block';
3
+ import type { SlasherConfig } from '@aztec/stdlib/interfaces/server';
4
+ import { type Watcher, type WatcherEmitter } from '../watcher.js';
5
+ declare const CheckpointEquivocationWatcherConfigKeys: readonly ["slashDuplicateProposalPenalty"];
6
+ type CheckpointEquivocationWatcherConfig = Pick<SlasherConfig, (typeof CheckpointEquivocationWatcherConfigKeys)[number]>;
7
+ type EquivocationEventSource = Pick<L2BlockSourceEventEmitter, 'events'>;
8
+ type ProposerLookup = Pick<EpochCacheInterface, 'getProposerAttesterAddressInSlot'>;
9
+ declare const CheckpointEquivocationWatcher_base: new () => WatcherEmitter;
10
+ /**
11
+ * Slashes the slot proposer for DUPLICATE_PROPOSAL when the archiver detects that a
12
+ * locally-stored proposed checkpoint disagrees with the L1-confirmed checkpoint at the
13
+ * same slot. Both are signed by the slot proposer (the proposed one by accepting it via
14
+ * P2P or building it locally; the L1 one by submission), so the proposer equivocated.
15
+ */
16
+ export declare class CheckpointEquivocationWatcher extends CheckpointEquivocationWatcher_base implements Watcher {
17
+ private readonly l2BlockSource;
18
+ private readonly epochCache;
19
+ private readonly log;
20
+ private readonly handler;
21
+ private config;
22
+ constructor(l2BlockSource: EquivocationEventSource, epochCache: ProposerLookup, config: CheckpointEquivocationWatcherConfig);
23
+ updateConfig(config: Partial<CheckpointEquivocationWatcherConfig>): void;
24
+ start(): Promise<void>;
25
+ stop(): Promise<void>;
26
+ /** Public for tests. */
27
+ onEquivocationDetected(event: CheckpointEquivocationDetectedEvent): Promise<void>;
28
+ }
29
+ export {};
30
+ //# sourceMappingURL=data:application/json;base64,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
@@ -0,0 +1 @@
1
+ {"version":3,"file":"checkpoint_equivocation_watcher.d.ts","sourceRoot":"","sources":["../../src/watchers/checkpoint_equivocation_watcher.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,oBAAoB,CAAC;AAG9D,OAAO,EACL,KAAK,mCAAmC,EACxC,KAAK,yBAAyB,EAE/B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iCAAiC,CAAC;AAKrE,OAAO,EAA6C,KAAK,OAAO,EAAE,KAAK,cAAc,EAAE,MAAM,eAAe,CAAC;AAE7G,QAAA,MAAM,uCAAuC,4CAA6C,CAAC;AAE3F,KAAK,mCAAmC,GAAG,IAAI,CAC7C,aAAa,EACb,CAAC,OAAO,uCAAuC,CAAC,CAAC,MAAM,CAAC,CACzD,CAAC;AAEF,KAAK,uBAAuB,GAAG,IAAI,CAAC,yBAAyB,EAAE,QAAQ,CAAC,CAAC;AACzE,KAAK,cAAc,GAAG,IAAI,CAAC,mBAAmB,EAAE,kCAAkC,CAAC,CAAC;;AAEpF;;;;;GAKG;AACH,qBAAa,6BAA8B,SAAQ,kCAA2C,YAAW,OAAO;IAM5G,OAAO,CAAC,QAAQ,CAAC,aAAa;IAC9B,OAAO,CAAC,QAAQ,CAAC,UAAU;IAN7B,OAAO,CAAC,QAAQ,CAAC,GAAG,CAA2D;IAC/E,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAsD;IAC9E,OAAO,CAAC,MAAM,CAAsC;IAEpD,YACmB,aAAa,EAAE,uBAAuB,EACtC,UAAU,EAAE,cAAc,EAC3C,MAAM,EAAE,mCAAmC,EAU5C;IAEM,YAAY,CAAC,MAAM,EAAE,OAAO,CAAC,mCAAmC,CAAC,GAAG,IAAI,CAG9E;IAEM,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAG5B;IAEM,IAAI,IAAI,OAAO,CAAC,IAAI,CAAC,CAG3B;IAED,wBAAwB;IACX,sBAAsB,CAAC,KAAK,EAAE,mCAAmC,GAAG,OAAO,CAAC,IAAI,CAAC,CA2B7F;CACF"}