@exodus/bitcoin-api 4.8.2 → 4.8.4

package/CHANGELOG.md

@@ -3,6 +3,25 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [4.8.4](https://github.com/ExodusMovement/assets/compare/@exodus/bitcoin-api@4.8.3...@exodus/bitcoin-api@4.8.4) (2026-02-03)
+
+
+### Bug Fixes
+
+* **bitcoin-api:** Fix non-BTC nested‑segwit redeem script ([#7357](https://github.com/ExodusMovement/assets/issues/7357)) ([#7381](https://github.com/ExodusMovement/assets/issues/7381)) ([c049583](https://github.com/ExodusMovement/assets/commit/c04958336885777f66b845db72a0900c935cbab0))
+
+
+
+## [4.8.3](https://github.com/ExodusMovement/assets/compare/@exodus/bitcoin-api@4.8.2...@exodus/bitcoin-api@4.8.3) (2025-12-16)
+
+
+### Bug Fixes
+
+
+* fix: keep pending txs until /tx check fails for utxo coins (#7009)
+
+
+
 ## [4.8.2](https://github.com/ExodusMovement/assets/compare/@exodus/bitcoin-api@4.8.1...@exodus/bitcoin-api@4.8.2) (2025-12-04)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/bitcoin-api",
-  "version": "4.8.2",
+  "version": "4.8.4",
   "description": "Bitcoin transaction and fee monitors, RPC with the blockchain node, other networking code.",
   "type": "module",
   "main": "src/index.js",
@@ -60,5 +60,5 @@
     "type": "git",
     "url": "git+https://github.com/ExodusMovement/assets.git"
   },
-  "gitHead": "5440ba73907657281aa3c062168f4fda1f3b6581"
+  "gitHead": "bd87fd7045fd427d4fb972aacb3877af10247aec"
 }

package/src/psbt-builder.js

@@ -20,9 +20,9 @@ function canParseTx(rawTxBuffer, Transaction) {
   }
 }
 
-function getWrappedSegwitRedeemScript({ publicKey, address, context = '' }) {
-  const p2wpkh = payments.p2wpkh({ pubkey: publicKey })
-  const p2sh = payments.p2sh({ redeem: p2wpkh })
+function getWrappedSegwitRedeemScript({ publicKey, address, network, context = '' }) {
+  const p2wpkh = payments.p2wpkh({ pubkey: publicKey, network })
+  const p2sh = payments.p2sh({ redeem: p2wpkh, network })
 
   if (address !== p2sh.address) {
     throw new Error(`Expected P2SH script to be a nested p2wpkh${context ? ' for ' + context : ''}`)
@@ -105,6 +105,7 @@ function createPsbtInput({
     psbtInput.redeemScript = getWrappedSegwitRedeemScript({
       publicKey,
       address: input.address,
+      network: asset.coinInfo.toBitcoinJS(),
       context: `input address ${input.address}`,
     })
   }
@@ -170,6 +171,7 @@ function createPsbtOutput({ address, amount, asset, addressPathsMap, purposeXPub
     psbtOutput.redeemScript = getWrappedSegwitRedeemScript({
       publicKey,
       address,
+      network: asset.coinInfo.toBitcoinJS(),
       context: `output address ${address}`,
     })
   }

package/src/tx-log/bitcoin-monitor-scanner.js

@@ -669,7 +669,26 @@ export class BitcoinMonitorScanner {
     // Keep new utxos when they intersect with the stored utxos.
     utxoCol = utxoCol.union(currentStoredUtxos).difference(utxosToRemoveCol)
 
-    for (const tx of Object.values(unconfirmedTxsToCheck)) {
+    const pendingDropCandidates = Object.values(unconfirmedTxsToCheck)
+    const verificationResults = await Promise.all(
+      pendingDropCandidates.map(async (tx) => {
+        try {
+          const txStatus = await insightClient.fetchTx(tx.txId)
+          return { tx, shouldDrop: !txStatus }
+        } catch (err) {
+          console.log(
+            `${assetName}: failed to verify pending tx ${tx.txId} before drop check: ${
+              err?.message || 'unknown'
+            }`
+          )
+          return { tx, shouldDrop: false }
+        }
+      })
+    )
+
+    for (const { tx, shouldDrop } of verificationResults) {
+      if (!shouldDrop) continue
+
       existingTxs.push({ ...tx, dropped: true }) // TODO: this will decrease the chain index, it shouldn't be an issue considering the gap limit
       utxoCol = utxoCol.difference(utxoCol.getTxIdUtxos(tx.txId))
       const utxosToAdd = []

package/src/tx-sign/create-sign-with-wallet.js

@@ -64,8 +64,9 @@ export function createSignWithWallet({
         // P2WPKH. Exodus doesn't use P2SH addresses so we should only ever be
         // signing a P2SH input if we are importing a private key
         // BIP143: As a default policy, only compressed public keys are accepted in P2WPKH and P2WSH
-        const p2wpkh = payments.p2wpkh({ pubkey: publicKey })
-        const p2sh = payments.p2sh({ redeem: p2wpkh })
+        const network = coinInfo.toBitcoinJS()
+        const p2wpkh = payments.p2wpkh({ pubkey: publicKey, network })
+        const p2sh = payments.p2sh({ redeem: p2wpkh, network })
         if (address === p2sh.address) {
           // Set the redeem script in the psbt in case it's missing.
           if (!Buffer.isBuffer(input.redeemScript)) {