@exodus/bitcoin-api 2.3.3 → 2.3.4

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/bitcoin-api",
-  "version": "2.3.3",
+  "version": "2.3.4",
   "description": "Exodus bitcoin-api",
   "main": "src/index.js",
   "files": [
@@ -19,6 +19,7 @@
   },
   "dependencies": {
     "@exodus/asset-lib": "^3.7.2",
+    "@exodus/basic-utils": "^2.0.1",
     "@exodus/bip44-constants": "^195.0.0",
     "@exodus/bitcoinjs-lib": "6.0.2-beta.5",
     "@exodus/models": "^8.10.4",
@@ -35,10 +36,11 @@
     "url-join": "4.0.0"
   },
   "devDependencies": {
+    "@exodus/asset-lib": "^3.7.1",
     "@exodus/bcash-meta": "^1.0.0",
     "@exodus/bip-schnorr": "0.6.6-fork-1",
     "@exodus/bitcoin-meta": "^1.0.1",
     "@noble/secp256k1": "~1.5.3"
   },
-  "gitHead": "87922c8e20b6e152449dd6e35185587fa78bba25"
+  "gitHead": "ae212da85b29d90a3656bcfa034608950f883df1"
 }

package/src/tx-send/index.js

@@ -16,6 +16,8 @@ import {
 import { findUnconfirmedSentRbfTxs } from '../tx-utils'
 import { getUsableUtxos, getUtxos } from '../utxos-utils'
 
+import * as defaultBitcoinjsLib from '@exodus/bitcoinjs-lib'
+
 const ASSETS_SUPPORTED_BIP_174 = [
   'bitcoin',
   'bitcoinregtest',
@@ -79,12 +81,40 @@ export async function getNonWitnessTxs(asset, utxos, insightClient) {
   return rawTxs
 }
 
+export const getSizeAndChangeScriptFactory = ({ bitcoinJsLib = defaultBitcoinjsLib } = {}) => ({
+  assetName,
+  tx,
+  rawTx,
+  changeUtxoIndex,
+  txId,
+}) => {
+  assert(assetName, 'assetName is required')
+  assert(rawTx, 'rawTx is required')
+  assert(typeof changeUtxoIndex === 'number', 'changeUtxoIndex must be a number')
+  if (tx) {
+    return { script: tx.outs?.[changeUtxoIndex]?.script.toString('hex'), size: tx.virtualSize }
+  }
+  // Trezor doesn't return tx!! we need to reparse it!
+  const parsedTx = bitcoinJsLib.Transaction.fromBuffer(Buffer.from(rawTx, 'hex'))
+  try {
+    return {
+      script: parsedTx.outs?.[changeUtxoIndex]?.script.toString('hex'),
+      size: parsedTx.virtualSize(),
+    }
+  } catch (e) {
+    console.warn(
+      `tx-send warning: ${assetName} cannot extract script and size from tx ${txId}. ${e}`
+    )
+    return {}
+  }
+}
+
 // not ported from Exodus; but this demos signing / broadcasting
 // NOTE: this will be ripped out in the coming weeks
 
 export const createAndBroadcastTXFactory = ({
   getFeeEstimator,
-
+  getSizeAndChangeScript = getSizeAndChangeScriptFactory(), // for decred customizations
   allowUnconfirmedRbfEnabledUtxos,
 }) => async ({ asset, walletAccount, address, amount, options }, { assetClientInterface }) => {
   const {
@@ -308,6 +338,8 @@ export const createAndBroadcastTXFactory = ({
     }
   }
 
+  const { script, size } = getSizeAndChangeScript({ assetName, tx, rawTx, changeUtxoIndex, txId })
+
   let remainingUtxos = usableUtxos.difference(selectedUtxos)
   if (changeUtxoIndex !== -1) {
     const address = Address.create(ourAddress.address, ourAddress.meta)
@@ -315,7 +347,7 @@ export const createAndBroadcastTXFactory = ({
       txId,
       address,
       vout: changeUtxoIndex,
-      script: tx.outs[changeUtxoIndex].script.toString('hex'),
+      script,
       value: change,
       confirmations: 0,
       rbfEnabled,
@@ -364,9 +396,7 @@ export const createAndBroadcastTXFactory = ({
         data: {
           sent: selfSend ? [] : receivers,
           rbfEnabled,
-          feePerKB: ['bitcoin', 'bitcoinregtest', 'bitcointestnet'].includes(assetName)
-            ? fee.div(tx.virtualSize / 1000).toBaseNumber()
-            : undefined,
+          feePerKB: size ? fee.div(size / 1000).toBaseNumber() : undefined,
           changeAddress: changeOutput ? ourAddress : undefined,
           blockHeight,
           blocksSeen: 0,

package/src/tx-sign/default-create-tx.js

@@ -1,7 +1,10 @@
 import assert from 'minimalistic-assert'
 import lodash from 'lodash'
 import ECPairFactory from 'ecpair'
-import { Psbt, Transaction } from '@exodus/bitcoinjs-lib'
+import { payments, Psbt, Transaction } from '@exodus/bitcoinjs-lib'
+import { getOwnProperty } from '@exodus/basic-utils'
+
+import secp256k1 from 'secp256k1'
 
 import { toAsyncSigner, tweakSigner } from './taproot'
 
@@ -45,10 +48,11 @@ export const signTxFactory = ({ assetName, resolvePurpose, keys, coinInfo, netwo
     ECPair = ECPair || ECPairFactory(ecc)
 
     const getKeyAndPurpose = lodash.memoize((address) => {
-      // TODO: Consider using privateKeysAddressMap for other assets
       const purpose = resolvePurpose(address)
       if (privateKeysAddressMap) {
-        const key = ECPair.fromWIF(privateKeysAddressMap[address], networkInfo)
+        const privateKey = getOwnProperty(privateKeysAddressMap, address, 'string')
+        assert(privateKey, `there is no private key for address ${address}`)
+        const key = ECPair.fromWIF(privateKey, networkInfo)
         return { key, purpose }
       }
       const path = addressPathsMap[address]
@@ -96,6 +100,20 @@ export const signTxFactory = ({ assetName, resolvePurpose, keys, coinInfo, netwo
     for (let index = 0; index < inputs.length; index++) {
       const { address } = inputs[index]
       const { key, purpose } = getKeyAndPurpose(address)
+
+      if (purpose === 49) {
+        // If spending from a P2SH address, we assume the address is P2SH wrapping
+        // P2WPKH. Exodus doesn't use P2SH addresses so we should only ever be
+        // signing a P2SH input if we are importing a private key
+        // BIP143: As a default policy, only compressed public keys are accepted in P2WPKH and P2WSH
+        const publicKey = secp256k1.publicKeyCreate(key.privateKey, true)
+        const p2wpkh = payments.p2wpkh({ pubkey: publicKey })
+        const p2sh = payments.p2sh({ redeem: p2wpkh })
+        psbt.updateInput(index, {
+          redeemScript: p2sh.redeem.output,
+        })
+      }
+
       if (ecc.signSchnorrAsync) {
         // desktop / BE / mobile with bip-schnorr signing
         const isTaprootAddress = purpose === 86