@exodus/bitcoin-api 4.9.6 → 4.11.0

package/CHANGELOG.md

@@ -3,6 +3,32 @@
 All notable changes to this project will be documented in this file.
 See [Conventional Commits](https://conventionalcommits.org) for commit guidelines.
 
+## [4.11.0](https://github.com/ExodusMovement/assets/compare/@exodus/bitcoin-api@4.10.0...@exodus/bitcoin-api@4.11.0) (2026-03-15)
+
+
+### Features
+
+
+* feat: update wif to 4.0.0 (#6195)
+
+
+
+## [4.10.0](https://github.com/ExodusMovement/assets/compare/@exodus/bitcoin-api@4.9.6...@exodus/bitcoin-api@4.10.0) (2026-03-11)
+
+
+### Features
+
+
+* feat: extract trace id in bitcoin (#7278)
+
+
+### Bug Fixes
+
+
+* fix(bitcoin-api): avoid restoring spent dropped inputs (#7559)
+
+
+
 ## [4.9.6](https://github.com/ExodusMovement/assets/compare/@exodus/bitcoin-api@4.9.5...@exodus/bitcoin-api@4.9.6) (2026-03-02)
 
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@exodus/bitcoin-api",
-  "version": "4.9.6",
+  "version": "4.11.0",
   "description": "Bitcoin transaction and fee monitors, RPC with the blockchain node, other networking code.",
   "type": "module",
   "main": "src/index.js",
@@ -36,6 +36,7 @@
     "@exodus/safe-string": "^1.4.0",
     "@exodus/send-validation-model": "^1.0.0",
     "@exodus/simple-retry": "^0.0.6",
+    "@exodus/traceparent": "^3.0.1",
     "bech32": "^1.1.3",
     "bip32-path": "^0.4.2",
     "bs58check": "^3.0.1",
@@ -47,7 +48,7 @@
     "socket.io-client": "^2.1.1",
     "url-join": "^4.0.0",
     "varuint-bitcoin": "^1.1.0",
-    "wif": "^2.0.6"
+    "wif": "^4.0.0"
   },
   "devDependencies": {
     "@exodus/bitcoin-meta": "^2.0.0",
@@ -61,5 +62,5 @@
     "type": "git",
     "url": "git+https://github.com/ExodusMovement/assets.git"
   },
-  "gitHead": "04dc4d08ec82b0405ec1ec3a52d682ef11451914"
+  "gitHead": "e746a88ef78a0e7167587bfa14068ceb494d6fd7"
 }

package/src/fee/fee-utils.js

@@ -1,3 +1,4 @@
+// eslint-disable-next-line @exodus/import/no-deprecated
 import { isNumberUnit, UnitType } from '@exodus/currency'
 import { UtxoCollection } from '@exodus/models'
 import assert from 'minimalistic-assert'
@@ -53,6 +54,7 @@ export default function createDefaultFeeEstimator(getSize) {
 export function parseCurrency(val, currency) {
   assert(currency instanceof UnitType, 'Currency must be supples as a UnitType')
 
+  // eslint-disable-next-line @exodus/import/no-deprecated
   if (isNumberUnit(val)) return val // TODO: consider checking if the unitType.equals(currency) (if currency is object)
 
   if (typeof val === 'string') return currency.parse(val)

package/src/fee/script-classifier.js

@@ -1,5 +1,6 @@
 import { memoizeLruCache } from '@exodus/asset-lib'
 import { scriptClassify } from '@exodus/bitcoinjs'
+// eslint-disable-next-line @exodus/import/no-deprecated
 import { hashSync } from '@exodus/crypto/hash'
 import assert from 'minimalistic-assert'
 
@@ -8,6 +9,7 @@ const { P2PKH, P2SH, P2WPKH, P2WSH, P2TR } = scriptClassify.types
 const cacheSize = 1000
 const maxSize = 30
 const hashStringIfTooBig = (str) =>
+  // eslint-disable-next-line @exodus/import/no-deprecated
   str.length > maxSize ? hashSync('sha256', str, 'hex').slice(0, maxSize) : str
 
 export const scriptClassifierFactory = ({ addressApi }) => {

package/src/hash-utils.js

@@ -1,9 +1,12 @@
+// eslint-disable-next-line @exodus/import/no-deprecated
 import { hashSync } from '@exodus/crypto/hash'
 
 export function hash160(buffer) {
+  // eslint-disable-next-line @exodus/import/no-deprecated
   return hashSync('hash160', buffer)
 }
 
 export function sha256(buffer) {
+  // eslint-disable-next-line @exodus/import/no-deprecated
   return hashSync('sha256', buffer)
 }

package/src/insight-api-client/index.js

@@ -1,5 +1,6 @@
 import { safeString } from '@exodus/safe-string'
 import { retry } from '@exodus/simple-retry'
+import { TraceId } from '@exodus/traceparent'
 import delay from 'delay'
 import lodash from 'lodash'
 import urlJoin from 'url-join'
@@ -11,7 +12,6 @@ const INSIGHT_JSON_ERROR_MESSAGE = safeString`insight-api-invalid-json`
 const INSIGHT_MISSING_TXID_MESSAGE = safeString`insight-api-missing-txid`
 const INSIGHT_HTTP_ERROR_BALANCE_MESSAGE = safeString`insight-api-http-error:balance`
 const INSIGHT_HTTP_ERROR_STATUS_MESSAGE = safeString`insight-api-http-error:status`
-const INSIGHT_HTTP_ERROR_ADDR_MESSAGE = safeString`insight-api-http-error:addr`
 const INSIGHT_HTTP_ERROR_UTXO_MESSAGE = safeString`insight-api-http-error:utxo`
 const INSIGHT_HTTP_ERROR_TX_MESSAGE = safeString`insight-api-http-error:tx`
 const INSIGHT_HTTP_ERROR_FULLTX_MESSAGE = safeString`insight-api-http-error:fulltx`
@@ -20,8 +20,19 @@ const INSIGHT_HTTP_ERROR_ADDRS_TXS_MESSAGE = safeString`insight-api-http-error:a
 const INSIGHT_HTTP_ERROR_UNCONFIRMED_ANCESTOR_MESSAGE = safeString`insight-api-http-error:unconfirmed-ancestor`
 const INSIGHT_HTTP_ERROR_FEES_MESSAGE = safeString`insight-api-http-error:fees`
 const INSIGHT_HTTP_ERROR_BROADCAST_MESSAGE = safeString`insight-api-http-error:broadcast`
-const INSIGHT_HTTP_ERROR_CLAIMABLE_MESSAGE = safeString`insight-api-http-error:claimable`
-const INSIGHT_HTTP_ERROR_UNCLAIMED_MESSAGE = safeString`insight-api-http-error:unclaimed`
+
+const parseBroadcastErrorReason = (data) => {
+  if (!data) {
+    return null
+  }
+
+  try {
+    const parsed = JSON.parse(data)
+    return parsed?.error || data
+  } catch {
+    return data
+  }
+}
 
 const fetchJson = async (
   url,
@@ -35,8 +46,11 @@ const fetchJson = async (
     return null
   }
 
+  const traceId = TraceId.fromResponse(response)
+
   if (!response.ok) {
     const error = new Error(httpErrorMessage)
+    error.traceId = traceId
     error.code = `${response.status}`
     throw error
   }
@@ -44,7 +58,9 @@ const fetchJson = async (
   try {
     return await response.json()
   } catch (err) {
-    throw new Error(INSIGHT_JSON_ERROR_MESSAGE, { cause: err })
+    const error = new Error(INSIGHT_JSON_ERROR_MESSAGE, { cause: err })
+    error.traceId = traceId
+    throw error
   }
 }
 
@@ -63,12 +79,6 @@ export default class InsightAPIClient {
     this._baseURL = baseURL
   }
 
-  async isNetworkConnected() {
-    const url = urlJoin(this._baseURL, '/peer')
-    const peerStatus = await fetchJson(url, { timeout: 10_000 })
-    return !!peerStatus.connected
-  }
-
   async fetchBalance(address) {
     const encodedAddress = encodeURIComponent(address)
     const url = urlJoin(this._baseURL, `/balance/${encodedAddress}`)
@@ -86,24 +96,14 @@ export default class InsightAPIClient {
     return status.info.blocks
   }
 
-  async fetchAddress(address, opts) {
+  async fetchUTXOs(address, { assetNames = [] } = {}) {
     const encodedAddress = encodeURIComponent(address)
-    const url = urlJoin(
-      this._baseURL,
-      opts?.includeTxs ? `/addr/${encodedAddress}` : `/addr/${encodedAddress}?noTxList=1`
-    )
-    return fetchJson(url, undefined, false, INSIGHT_HTTP_ERROR_ADDR_MESSAGE)
-  }
-
-  async fetchUTXOs(addresses, { assetNames = [] } = {}) {
-    if (Array.isArray(addresses)) addresses = addresses.join(',')
     const query = new URLSearchParams('noCache=1')
     if (assetNames) {
       query.set('assetNames', assetNames.join(','))
     }
 
-    const encodedAddresses = encodeURIComponent(addresses)
-    const url = urlJoin(this._baseURL, `/addrs/${encodedAddresses}/utxo?${query}`)
+    const url = urlJoin(this._baseURL, `/addrs/${encodedAddress}/utxo?${query}`)
     const utxos = await fetchJson(url, undefined, false, INSIGHT_HTTP_ERROR_UTXO_MESSAGE)
 
     return utxos.map((utxo) => ({
@@ -204,12 +204,16 @@ export default class InsightAPIClient {
     const response = await fetch(url, fetchOptions)
     let data = await response.text()
 
+    const traceId = TraceId.fromResponse(response)
+
     if (!response.ok) {
       console.warn('Insight Broadcast HTTP Error:')
       console.warn(response.statusText)
       console.warn(data)
       const error = new Error(INSIGHT_HTTP_ERROR_BROADCAST_MESSAGE)
+      error.traceId = traceId
       error.code = `${response.status}`
+      error.reason = parseBroadcastErrorReason(data)
       throw error
     }
 
@@ -221,19 +225,9 @@ export default class InsightAPIClient {
     }
 
     if (!data.txid) {
-      throw new Error(INSIGHT_MISSING_TXID_MESSAGE)
+      const error = new Error(INSIGHT_MISSING_TXID_MESSAGE)
+      error.traceId = traceId
+      throw error
     }
   }
-
-  async getClaimable(address) {
-    const encodedAddress = encodeURIComponent(address)
-    const url = urlJoin(this._baseURL, `/addr/${encodedAddress}/claimable`)
-    return fetchJson(url, undefined, false, INSIGHT_HTTP_ERROR_CLAIMABLE_MESSAGE)
-  }
-
-  async getUnclaimed(address) {
-    const encodedAddress = encodeURIComponent(address)
-    const url = urlJoin(this._baseURL, `/addr/${encodedAddress}/unclaimed`)
-    return fetchJson(url, undefined, false, INSIGHT_HTTP_ERROR_UNCLAIMED_MESSAGE)
-  }
 }

package/src/move-funds.js

@@ -204,7 +204,7 @@ export const moveFundsFactory = ({
   }
 
   async function getUtxos({ asset, address }) {
-    const rawUtxos = await insightClient.fetchUTXOs([address])
+    const rawUtxos = await insightClient.fetchUTXOs(address)
     return UtxoCollection.fromArray(
       rawUtxos.map((utxo) => ({
         txId: utxo.txId,

package/src/tx-log/bitcoin-monitor-scanner.js

@@ -632,9 +632,16 @@ export class BitcoinMonitorScanner {
             continue
           }
 
-          const tx = await insightClient.fetchTx(utxo.txId)
-          if (tx) {
-            // previously spent tx still exists, readd utxo
+          let prevTx = null
+          try {
+            prevTx = await insightClient.fetchTxObject(utxo.txId)
+          } catch {
+            prevTx = null
+          }
+
+          const prevOutput = prevTx?.vout?.find((output) => output.n === utxo.vout)
+          if (prevOutput && !prevOutput.spentTxId) {
+            // Only readd inputs whose exact outpoint is still unspent.
             utxosToAdd.push(utxo)
           }
         }

package/src/tx-send/broadcast-tx.js

@@ -1,5 +1,7 @@
 import { retry } from '@exodus/simple-retry'
 
+const getErrorText = (error) => [error?.message, error?.reason].filter(Boolean).join(' ')
+
 /**
  * Broadcast a signed transaction to the Bitcoin network with retry logic
  * @param {Object} params
@@ -14,14 +16,15 @@ export async function broadcastTransaction({ asset, rawTx }) {
       try {
         return await asset.api.broadcastTx(rawTxHex)
       } catch (e) {
+        const errorText = getErrorText(e)
         // Mark certain errors as final (non-retryable)
         if (
-          /missing inputs/i.test(e.message) ||
-          /absurdly-high-fee/.test(e.message) ||
-          /too-long-mempool-chain/.test(e.message) ||
-          /txn-mempool-conflict/.test(e.message) ||
-          /tx-size/.test(e.message) ||
-          /txn-already-in-mempool/.test(e.message)
+          /(missing inputs|missingorspent)/i.test(errorText) ||
+          /absurdly-high-fee/.test(errorText) ||
+          /too-long-mempool-chain/.test(errorText) ||
+          /txn-mempool-conflict/.test(errorText) ||
+          /tx-size/.test(errorText) ||
+          /txn-already-in-mempool/.test(errorText)
         ) {
           e.finalError = true
         }
@@ -37,7 +40,7 @@ export async function broadcastTransaction({ asset, rawTx }) {
   try {
     await broadcastTxWithRetry(rawTxHex)
   } catch (err) {
-    if (err.message.includes('txn-already-in-mempool')) {
+    if (getErrorText(err).includes('txn-already-in-mempool')) {
       // Not an error, transaction is already broadcast
       console.log('Transaction is already in the mempool.')
       return

package/src/tx-send/index.js

@@ -6,6 +6,8 @@ import { extractTransactionContext } from '../psbt-parser.js'
 import { broadcastTransaction } from './broadcast-tx.js'
 import { updateAccountState, updateTransactionLog } from './update-state.js'
 
+const getErrorText = (error) => [error?.message, error?.reason].filter(Boolean).join(' ')
+
 const checkTxExists = async ({ asset, txId }) => {
   try {
     const tx = await asset.insightClient.fetchTx(txId)
@@ -212,7 +214,7 @@ export const sendTxFactory = ({
       if (txExists) {
         console.warn(`tx-send: ${assetName} tx already broadcast`, txId)
       } else {
-        if (/insight broadcast http error.*missing inputs/i.test(err.message)) {
+        if (/(missing inputs|missingorspent)/i.test(getErrorText(err))) {
           err.txInfo = JSON.stringify({
             amount: sendAmount.toDefaultString({ unit: true }),
             fee: ((fee && fee.toDefaultString({ unit: true })) || 0).toString(),