@keep-network/tbtc-v2 1.6.0-dev.20 → 1.6.0-dev.22

package/artifacts/solcInputs/{3820d7396bf453fe963a951f7b59372d.json → dd1c38c53a7547fe3e334d72c1e4d8e1.json}

@@ -38,7 +38,7 @@
       "content": "// SPDX-License-Identifier: GPL-3.0-only\n//\n// ▓▓▌ ▓▓ ▐▓▓ ▓▓▓▓▓▓▓▓▓▓▌▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▄\n// ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▌▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓\n//   ▓▓▓▓▓▓    ▓▓▓▓▓▓▓▀    ▐▓▓▓▓▓▓    ▐▓▓▓▓▓   ▓▓▓▓▓▓     ▓▓▓▓▓   ▐▓▓▓▓▓▌   ▐▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▄▄▓▓▓▓▓▓▓▀      ▐▓▓▓▓▓▓▄▄▄▄         ▓▓▓▓▓▓▄▄▄▄         ▐▓▓▓▓▓▌   ▐▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▓▓▓▓▓▓▓▀        ▐▓▓▓▓▓▓▓▓▓▓         ▓▓▓▓▓▓▓▓▓▓         ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▀▀▓▓▓▓▓▓▄       ▐▓▓▓▓▓▓▀▀▀▀         ▓▓▓▓▓▓▀▀▀▀         ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▀\n//   ▓▓▓▓▓▓   ▀▓▓▓▓▓▓▄     ▐▓▓▓▓▓▓     ▓▓▓▓▓   ▓▓▓▓▓▓     ▓▓▓▓▓   ▐▓▓▓▓▓▌\n// ▓▓▓▓▓▓▓▓▓▓ █▓▓▓▓▓▓▓▓▓ ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓  ▓▓▓▓▓▓▓▓▓▓\n// ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓ ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓  ▓▓▓▓▓▓▓▓▓▓\n//\n//                           Trust math, not hardware.\n\npragma solidity 0.8.17;\n\nlibrary Wallets {\n    struct Wallet {\n        // Keccak256 hash of group members identifiers array. Group members do not\n        // include operators selected by the sortition pool that misbehaved during DKG.\n        bytes32 membersIdsHash;\n        // Uncompressed ECDSA public key stored as X and Y coordinates (32 bytes each).\n        bytes32 publicKeyX;\n        bytes32 publicKeyY;\n        // This struct doesn't contain `__gap` property as the structure is stored\n        // in a mapping, mappings store values in different slots and they are\n        // not contiguous with other values.\n    }\n\n    struct Data {\n        // Mapping of keccak256 hashes of wallet public keys to wallet details.\n        // Hash of public key is considered an unique wallet identifier.\n        mapping(bytes32 => Wallet) registry;\n        // Reserved storage space in case we need to add more variables.\n        // See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage_gaps\n        // slither-disable-next-line unused-state\n        uint256[49] __gap;\n    }\n\n    /// @notice Performs preliminary validation of a new group public key.\n    ///         The group public key must be unique and have 64 bytes in length.\n    ///         If the validation fails, the function reverts. This function\n    ///         must be called first for a public key of a wallet added with\n    ///         `addWallet` function.\n    /// @param publicKey Uncompressed public key of a new wallet.\n    function validatePublicKey(Data storage self, bytes calldata publicKey)\n        internal\n        view\n    {\n        require(publicKey.length == 64, \"Invalid length of the public key\");\n\n        bytes32 walletID = keccak256(publicKey);\n        require(\n            self.registry[walletID].publicKeyX == bytes32(0),\n            \"Wallet with the given public key already exists\"\n        );\n\n        bytes32 publicKeyX = bytes32(publicKey[:32]);\n        require(publicKeyX != bytes32(0), \"Wallet public key must be non-zero\");\n    }\n\n    /// @notice Registers a new wallet. This function does not validate\n    ///         parameters. The code calling this function must call\n    ///         `validatePublicKey` first.\n    /// @dev Uses a public key hash as a unique identifier of a wallet.\n    /// @param membersIdsHash Keccak256 hash of group members identifiers array\n    /// @param publicKey Uncompressed public key\n    /// @return walletID Wallet's ID\n    /// @return publicKeyX Wallet's public key's X coordinate\n    /// @return publicKeyY Wallet's public key's Y coordinate\n    function addWallet(\n        Data storage self,\n        bytes32 membersIdsHash,\n        bytes calldata publicKey\n    )\n        internal\n        returns (\n            bytes32 walletID,\n            bytes32 publicKeyX,\n            bytes32 publicKeyY\n        )\n    {\n        walletID = keccak256(publicKey);\n\n        publicKeyX = bytes32(publicKey[:32]);\n        publicKeyY = bytes32(publicKey[32:]);\n\n        self.registry[walletID].membersIdsHash = membersIdsHash;\n        self.registry[walletID].publicKeyX = publicKeyX;\n        self.registry[walletID].publicKeyY = publicKeyY;\n    }\n\n    /// @notice Deletes wallet with the given ID from the registry. Reverts\n    ///         if wallet with the given ID has not been registered or if it\n    ///         has already been closed.\n    function deleteWallet(Data storage self, bytes32 walletID) internal {\n        require(\n            isWalletRegistered(self, walletID),\n            \"Wallet with the given ID has not been registered\"\n        );\n\n        delete self.registry[walletID];\n    }\n\n    /// @notice Checks if a wallet with the given ID is registered.\n    /// @param walletID Wallet's ID\n    /// @return True if a wallet is registered, false otherwise\n    function isWalletRegistered(Data storage self, bytes32 walletID)\n        internal\n        view\n        returns (bool)\n    {\n        return self.registry[walletID].publicKeyX != bytes32(0);\n    }\n\n    /// @notice Returns Keccak256 hash of the wallet signing group members\n    ///         identifiers array. Group members do not include operators\n    ///         selected by the sortition pool that misbehaved during DKG.\n    ///         Reverts if wallet with the given ID is not registered.\n    /// @param walletID ID of the wallet\n    /// @return Wallet signing group members hash\n    function getWalletMembersIdsHash(Data storage self, bytes32 walletID)\n        internal\n        view\n        returns (bytes32)\n    {\n        require(\n            isWalletRegistered(self, walletID),\n            \"Wallet with the given ID has not been registered\"\n        );\n\n        return self.registry[walletID].membersIdsHash;\n    }\n\n    /// @notice Gets public key of a wallet with the given wallet ID.\n    ///         The public key is returned as X and Y coordinates.\n    ///         Reverts if wallet with the given ID is not registered.\n    /// @param walletID ID of the wallet\n    /// @return x Public key X coordinate\n    /// @return y Public key Y coordinate\n    function getWalletPublicKeyCoordinates(Data storage self, bytes32 walletID)\n        internal\n        view\n        returns (bytes32 x, bytes32 y)\n    {\n        require(\n            isWalletRegistered(self, walletID),\n            \"Wallet with the given ID has not been registered\"\n        );\n\n        Wallet storage wallet = self.registry[walletID];\n\n        return (wallet.publicKeyX, wallet.publicKeyY);\n    }\n\n    /// @notice Gets public key of a wallet with the given wallet ID.\n    ///         The public key is returned in an uncompressed format as a 64-byte\n    ///         concatenation of X and Y coordinates.\n    ///         Reverts if wallet with the given ID is not registered.\n    /// @param walletID ID of the wallet\n    /// @return Uncompressed public key of the wallet\n    function getWalletPublicKey(Data storage self, bytes32 walletID)\n        internal\n        view\n        returns (bytes memory)\n    {\n        (bytes32 x, bytes32 y) = getWalletPublicKeyCoordinates(self, walletID);\n        return bytes.concat(x, y);\n    }\n}\n"
     },
     "@keep-network/ecdsa/contracts/WalletRegistry.sol": {
-      "content": "// SPDX-License-Identifier: GPL-3.0-only\n//\n// ▓▓▌ ▓▓ ▐▓▓ ▓▓▓▓▓▓▓▓▓▓▌▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▄\n// ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▌▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓\n//   ▓▓▓▓▓▓    ▓▓▓▓▓▓▓▀    ▐▓▓▓▓▓▓    ▐▓▓▓▓▓   ▓▓▓▓▓▓     ▓▓▓▓▓   ▐▓▓▓▓▓▌   ▐▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▄▄▓▓▓▓▓▓▓▀      ▐▓▓▓▓▓▓▄▄▄▄         ▓▓▓▓▓▓▄▄▄▄         ▐▓▓▓▓▓▌   ▐▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▓▓▓▓▓▓▓▀        ▐▓▓▓▓▓▓▓▓▓▓         ▓▓▓▓▓▓▓▓▓▓         ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▀▀▓▓▓▓▓▓▄       ▐▓▓▓▓▓▓▀▀▀▀         ▓▓▓▓▓▓▀▀▀▀         ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▀\n//   ▓▓▓▓▓▓   ▀▓▓▓▓▓▓▄     ▐▓▓▓▓▓▓     ▓▓▓▓▓   ▓▓▓▓▓▓     ▓▓▓▓▓   ▐▓▓▓▓▓▌\n// ▓▓▓▓▓▓▓▓▓▓ █▓▓▓▓▓▓▓▓▓ ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓  ▓▓▓▓▓▓▓▓▓▓\n// ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓ ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓  ▓▓▓▓▓▓▓▓▓▓\n//\n//                           Trust math, not hardware.\n\npragma solidity 0.8.17;\n\nimport \"./api/IWalletRegistry.sol\";\nimport \"./api/IWalletOwner.sol\";\nimport \"./libraries/Wallets.sol\";\nimport {EcdsaAuthorization as Authorization} from \"./libraries/EcdsaAuthorization.sol\";\nimport {EcdsaDkg as DKG} from \"./libraries/EcdsaDkg.sol\";\nimport {EcdsaInactivity as Inactivity} from \"./libraries/EcdsaInactivity.sol\";\nimport {EcdsaDkgValidator as DKGValidator} from \"./EcdsaDkgValidator.sol\";\n\nimport \"@keep-network/sortition-pools/contracts/SortitionPool.sol\";\nimport \"@keep-network/random-beacon/contracts/api/IRandomBeacon.sol\";\nimport \"@keep-network/random-beacon/contracts/api/IRandomBeaconConsumer.sol\";\nimport \"@keep-network/random-beacon/contracts/Reimbursable.sol\";\nimport \"@keep-network/random-beacon/contracts/ReimbursementPool.sol\";\nimport \"@keep-network/random-beacon/contracts/Governable.sol\";\n\nimport \"@threshold-network/solidity-contracts/contracts/staking/IApplication.sol\";\nimport \"@threshold-network/solidity-contracts/contracts/staking/IStaking.sol\";\n\nimport \"@openzeppelin/contracts-upgradeable/proxy/utils/Initializable.sol\";\n\ncontract WalletRegistry is\n    IWalletRegistry,\n    IRandomBeaconConsumer,\n    IApplication,\n    Governable,\n    Reimbursable,\n    Initializable\n{\n    using Authorization for Authorization.Data;\n    using DKG for DKG.Data;\n    using Wallets for Wallets.Data;\n\n    // Libraries data storages\n    Authorization.Data internal authorization;\n    DKG.Data internal dkg;\n    Wallets.Data internal wallets;\n\n    /// @notice Slashing amount for submitting a malicious DKG result. Every\n    ///         DKG result submitted can be challenged for the time of\n    ///         `dkg.resultChallengePeriodLength`. If the DKG result submitted\n    ///         is challenged and proven to be malicious, the operator who\n    ///         submitted the malicious result is slashed for\n    ///         `_maliciousDkgResultSlashingAmount`.\n    uint96 internal _maliciousDkgResultSlashingAmount;\n\n    /// @notice Percentage of the staking contract malicious behavior\n    ///         notification reward which will be transferred to the notifier\n    ///         reporting about a malicious DKG result. Notifiers are rewarded\n    ///         from a notifiers treasury pool. For example, if\n    ///         notification reward is 1000 and the value of the multiplier is\n    ///         5, the notifier will receive: 5% of 1000 = 50 per each\n    ///         operator affected.\n    uint256 internal _maliciousDkgResultNotificationRewardMultiplier;\n\n    /// @notice Duration of the sortition pool rewards ban imposed on operators\n    ///         who missed their turn for DKG result submission or who failed\n    ///         a heartbeat.\n    uint256 internal _sortitionPoolRewardsBanDuration;\n\n    /// @notice Calculated max gas cost for submitting a DKG result. This will\n    ///         be refunded as part of the DKG approval process. It is in the\n    ///         submitter's interest to not skip his priority turn on the approval,\n    ///         otherwise the refund of the DKG submission will be refunded to\n    ///         another group member that will call the DKG approve function.\n    uint256 internal _dkgResultSubmissionGas;\n\n    /// @notice Gas that is meant to balance the DKG result approval's overall\n    ///         cost. It can be updated by the governance based on the current\n    ///         market conditions.\n    uint256 internal _dkgResultApprovalGasOffset;\n\n    /// @notice Gas that is meant to balance the notification of an operator\n    ///         inactivity. It can be updated by the governance based on the\n    ///         current market conditions.\n    uint256 internal _notifyOperatorInactivityGasOffset;\n\n    /// @notice Gas that is meant to balance the notification of a seed for DKG\n    ///         delivery timeout. It can be updated by the governance based on the\n    ///         current market conditions.\n    uint256 internal _notifySeedTimeoutGasOffset;\n\n    /// @notice Gas that is meant to balance the notification of a DKG protocol\n    ///         execution timeout. It can be updated by the governance based on the\n    ///         current market conditions.\n    /// @dev The value is subtracted for the refundable gas calculation, as the\n    ///      DKG timeout notification transaction recovers some gas when cleaning\n    ///      up the storage.\n    uint256 internal _notifyDkgTimeoutNegativeGasOffset;\n\n    /// @notice Stores current operator inactivity claim nonce for the given\n    ///         wallet signing group. Each claim is made with a unique nonce\n    ///         which protects against claim replay.\n    mapping(bytes32 => uint256) public inactivityClaimNonce; // walletID -> nonce\n\n    // Address that is set as owner of all wallets. Only this address can request\n    // new wallets creation and manage their state.\n    IWalletOwner public walletOwner;\n\n    // External dependencies\n\n    /// @custom:oz-upgrades-unsafe-allow state-variable-immutable\n    SortitionPool public immutable sortitionPool;\n    /// @custom:oz-upgrades-unsafe-allow state-variable-immutable\n    IStaking public immutable staking;\n    IRandomBeacon public randomBeacon;\n\n    // Events\n    event DkgStarted(uint256 indexed seed);\n\n    event DkgResultSubmitted(\n        bytes32 indexed resultHash,\n        uint256 indexed seed,\n        DKG.Result result\n    );\n\n    event DkgTimedOut();\n\n    event DkgResultApproved(\n        bytes32 indexed resultHash,\n        address indexed approver\n    );\n\n    event DkgResultChallenged(\n        bytes32 indexed resultHash,\n        address indexed challenger,\n        string reason\n    );\n\n    event DkgStateLocked();\n\n    event DkgSeedTimedOut();\n\n    event WalletCreated(\n        bytes32 indexed walletID,\n        bytes32 indexed dkgResultHash\n    );\n\n    event WalletClosed(bytes32 indexed walletID);\n\n    event DkgMaliciousResultSlashed(\n        bytes32 indexed resultHash,\n        uint256 slashingAmount,\n        address maliciousSubmitter\n    );\n\n    event DkgMaliciousResultSlashingFailed(\n        bytes32 indexed resultHash,\n        uint256 slashingAmount,\n        address maliciousSubmitter\n    );\n\n    event AuthorizationParametersUpdated(\n        uint96 minimumAuthorization,\n        uint64 authorizationDecreaseDelay,\n        uint64 authorizationDecreaseChangePeriod\n    );\n\n    event RewardParametersUpdated(\n        uint256 maliciousDkgResultNotificationRewardMultiplier,\n        uint256 sortitionPoolRewardsBanDuration\n    );\n\n    event SlashingParametersUpdated(uint256 maliciousDkgResultSlashingAmount);\n\n    event DkgParametersUpdated(\n        uint256 seedTimeout,\n        uint256 resultChallengePeriodLength,\n        uint256 resultChallengeExtraGas,\n        uint256 resultSubmissionTimeout,\n        uint256 resultSubmitterPrecedencePeriodLength\n    );\n\n    event GasParametersUpdated(\n        uint256 dkgResultSubmissionGas,\n        uint256 dkgResultApprovalGasOffset,\n        uint256 notifyOperatorInactivityGasOffset,\n        uint256 notifySeedTimeoutGasOffset,\n        uint256 notifyDkgTimeoutNegativeGasOffset\n    );\n\n    event RandomBeaconUpgraded(address randomBeacon);\n\n    event WalletOwnerUpdated(address walletOwner);\n\n    event OperatorRegistered(\n        address indexed stakingProvider,\n        address indexed operator\n    );\n\n    event AuthorizationIncreased(\n        address indexed stakingProvider,\n        address indexed operator,\n        uint96 fromAmount,\n        uint96 toAmount\n    );\n\n    event AuthorizationDecreaseRequested(\n        address indexed stakingProvider,\n        address indexed operator,\n        uint96 fromAmount,\n        uint96 toAmount,\n        uint64 decreasingAt\n    );\n\n    event AuthorizationDecreaseApproved(address indexed stakingProvider);\n\n    event InvoluntaryAuthorizationDecreaseFailed(\n        address indexed stakingProvider,\n        address indexed operator,\n        uint96 fromAmount,\n        uint96 toAmount\n    );\n\n    event OperatorJoinedSortitionPool(\n        address indexed stakingProvider,\n        address indexed operator\n    );\n\n    event OperatorStatusUpdated(\n        address indexed stakingProvider,\n        address indexed operator\n    );\n\n    event InactivityClaimed(\n        bytes32 indexed walletID,\n        uint256 nonce,\n        address notifier\n    );\n\n    modifier onlyStakingContract() {\n        require(\n            msg.sender == address(staking),\n            \"Caller is not the staking contract\"\n        );\n        _;\n    }\n\n    /// @notice Reverts if called not by the Wallet Owner.\n    modifier onlyWalletOwner() {\n        require(\n            msg.sender == address(walletOwner),\n            \"Caller is not the Wallet Owner\"\n        );\n        _;\n    }\n\n    modifier onlyReimbursableAdmin() override {\n        require(governance == msg.sender, \"Caller is not the governance\");\n        _;\n    }\n\n    /// @dev Used to initialize immutable variables only, use `initialize` function\n    ///      for upgradable contract initialization on deployment.\n    /// @custom:oz-upgrades-unsafe-allow constructor\n    constructor(SortitionPool _sortitionPool, IStaking _staking) {\n        sortitionPool = _sortitionPool;\n        staking = _staking;\n\n        _disableInitializers();\n    }\n\n    /// @dev Initializes upgradable contract on deployment.\n    function initialize(\n        DKGValidator _ecdsaDkgValidator,\n        IRandomBeacon _randomBeacon,\n        ReimbursementPool _reimbursementPool\n    ) external initializer {\n        randomBeacon = _randomBeacon;\n        reimbursementPool = _reimbursementPool;\n\n        _transferGovernance(msg.sender);\n\n        //\n        // All parameters set in the constructor are initial ones, used at the\n        // moment contracts were deployed for the first time. Parameters are\n        // governable and values assigned in the constructor do not need to\n        // reflect the current ones.\n        //\n\n        // Minimum authorization is 40k T.\n        //\n        // Authorization decrease delay is 45 days.\n        //\n        // Authorization decrease change period is 45 days. It means pending\n        // authorization decrease can be overwritten all the time.\n        authorization.setMinimumAuthorization(40_000e18);\n        authorization.setAuthorizationDecreaseDelay(3_888_000);\n        authorization.setAuthorizationDecreaseChangePeriod(3_888_000);\n\n        // Malicious DKG result slashing amount is set initially to 1% of the\n        // minimum authorization (400 T). This values needs to be increased\n        // significantly once the system is fully launched.\n        //\n        // Notifier of a malicious DKG result receives 100% of the notifier\n        // reward from the staking contract.\n        //\n        // Inactive operators are set as ineligible for rewards for 2 weeks.\n        _maliciousDkgResultSlashingAmount = 400e18;\n        _maliciousDkgResultNotificationRewardMultiplier = 100;\n        _sortitionPoolRewardsBanDuration = 2 weeks;\n\n        // DKG seed timeout is set to 48h assuming 15s block time. The same\n        // value is used by the Random Beacon as a relay entry hard timeout.\n        //\n        // DKG result challenge period length is set to 48h as well, assuming\n        // 15s block time.\n        //\n        // DKG result submission timeout covers:\n        // - 20 blocks required to confirm the DkgStarted event off-chain\n        // - 5 retries of the off-chain protocol that takes 211 blocks at most\n        // - 15 blocks to submit the result for each of the 100 members\n        // That gives: 20 + (5 * 211) + (15 * 100) = 2575\n        //\n        //\n        // The original DKG result submitter has 20 blocks to approve it before\n        // anyone else can do that.\n        //\n        // With these parameters, the happy path takes no more than 104 hours.\n        // In practice, it should take about 48 hours (just the challenge time).\n        dkg.init(sortitionPool, _ecdsaDkgValidator);\n        dkg.setSeedTimeout(11_520);\n        dkg.setResultChallengePeriodLength(11_520);\n        dkg.setResultChallengeExtraGas(50_000);\n        dkg.setResultSubmissionTimeout(2575);\n        dkg.setSubmitterPrecedencePeriodLength(20);\n\n        // Gas parameters were adjusted based on Ethereum state in April 2022.\n        // If the cost of EVM opcodes change over time, these parameters will\n        // have to be updated.\n        _dkgResultSubmissionGas = 290_000;\n        _dkgResultApprovalGasOffset = 72_000;\n        _notifyOperatorInactivityGasOffset = 93_000;\n        _notifySeedTimeoutGasOffset = 7_250;\n        _notifyDkgTimeoutNegativeGasOffset = 2_300;\n    }\n\n    /// @notice Withdraws application rewards for the given staking provider.\n    ///         Rewards are withdrawn to the staking provider's beneficiary\n    ///         address set in the staking contract. Reverts if staking provider\n    ///         has not registered the operator address.\n    /// @dev Emits `RewardsWithdrawn` event.\n    function withdrawRewards(address stakingProvider) external {\n        address operator = stakingProviderToOperator(stakingProvider);\n        require(operator != address(0), \"Unknown operator\");\n        (, address beneficiary, ) = staking.rolesOf(stakingProvider);\n        uint96 amount = sortitionPool.withdrawRewards(operator, beneficiary);\n        // slither-disable-next-line reentrancy-events\n        emit RewardsWithdrawn(stakingProvider, amount);\n    }\n\n    /// @notice Withdraws rewards belonging to operators marked as ineligible\n    ///         for sortition pool rewards.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract.\n    /// @param recipient Recipient of withdrawn rewards.\n    function withdrawIneligibleRewards(address recipient)\n        external\n        onlyGovernance\n    {\n        sortitionPool.withdrawIneligible(recipient);\n    }\n\n    /// @notice Used by staking provider to set operator address that will\n    ///         operate ECDSA node. The given staking provider can set operator\n    ///         address only one time. The operator address can not be changed\n    ///         and must be unique. Reverts if the operator is already set for\n    ///         the staking provider or if the operator address is already in\n    ///         use. Reverts if there is a pending authorization decrease for\n    ///         the staking provider.\n    function registerOperator(address operator) external {\n        authorization.registerOperator(operator);\n    }\n\n    /// @notice Lets the operator join the sortition pool. The operator address\n    ///         must be known - before calling this function, it has to be\n    ///         appointed by the staking provider by calling `registerOperator`.\n    ///         Also, the operator must have the minimum authorization required\n    ///         by ECDSA. Function reverts if there is no minimum stake\n    ///         authorized or if the operator is not known. If there was an\n    ///         authorization decrease requested, it is activated by starting\n    ///         the authorization decrease delay.\n    function joinSortitionPool() external {\n        authorization.joinSortitionPool(staking, sortitionPool);\n    }\n\n    /// @notice Updates status of the operator in the sortition pool. If there\n    ///         was an authorization decrease requested, it is activated by\n    ///         starting the authorization decrease delay.\n    ///         Function reverts if the operator is not known.\n    function updateOperatorStatus(address operator) external {\n        authorization.updateOperatorStatus(staking, sortitionPool, operator);\n    }\n\n    /// @notice Used by T staking contract to inform the application that the\n    ///         authorized stake amount for the given staking provider increased.\n    ///\n    ///         Reverts if the authorization amount is below the minimum.\n    ///\n    ///         The function is not updating the sortition pool. Sortition pool\n    ///         state needs to be updated by the operator with a call to\n    ///         `joinSortitionPool` or `updateOperatorStatus`.\n    ///\n    /// @dev Can only be called by T staking contract.\n    function authorizationIncreased(\n        address stakingProvider,\n        uint96 fromAmount,\n        uint96 toAmount\n    ) external onlyStakingContract {\n        authorization.authorizationIncreased(\n            stakingProvider,\n            fromAmount,\n            toAmount\n        );\n    }\n\n    /// @notice Used by T staking contract to inform the application that the\n    ///         authorization decrease for the given staking provider has been\n    ///         requested.\n    ///\n    ///         Reverts if the amount after deauthorization would be non-zero\n    ///         and lower than the minimum authorization.\n    ///\n    ///         If the operator is not known (`registerOperator` was not called)\n    ///         it lets to `approveAuthorizationDecrease` immediatelly. If the\n    ///         operator is known (`registerOperator` was called), the operator\n    ///         needs to update state of the sortition pool with a call to\n    ///         `joinSortitionPool` or `updateOperatorStatus`. After the\n    ///         sortition pool state is in sync, authorization decrease delay\n    ///         starts.\n    ///\n    ///         After authorization decrease delay passes, authorization\n    ///         decrease request needs to be approved with a call to\n    ///         `approveAuthorizationDecrease` function.\n    ///\n    ///         If there is a pending authorization decrease request, it is\n    ///         overwritten.\n    ///\n    /// @dev Can only be called by T staking contract.\n    function authorizationDecreaseRequested(\n        address stakingProvider,\n        uint96 fromAmount,\n        uint96 toAmount\n    ) external onlyStakingContract {\n        authorization.authorizationDecreaseRequested(\n            stakingProvider,\n            fromAmount,\n            toAmount\n        );\n    }\n\n    /// @notice Approves the previously registered authorization decrease\n    ///         request. Reverts if authorization decrease delay has not passed\n    ///         yet or if the authorization decrease was not requested for the\n    ///         given staking provider.\n    function approveAuthorizationDecrease(address stakingProvider) external {\n        authorization.approveAuthorizationDecrease(staking, stakingProvider);\n    }\n\n    /// @notice Used by T staking contract to inform the application the\n    ///         authorization has been decreased for the given staking provider\n    ///         involuntarily, as a result of slashing.\n    ///\n    ///         If the operator is not known (`registerOperator` was not called)\n    ///         the function does nothing. The operator was never in a sortition\n    ///         pool so there is nothing to update.\n    ///\n    ///         If the operator is known, sortition pool is unlocked, and the\n    ///         operator is in the sortition pool, the sortition pool state is\n    ///         updated. If the sortition pool is locked, update needs to be\n    ///         postponed. Every other staker is incentivized to call\n    ///         `updateOperatorStatus` for the problematic operator to increase\n    ///         their own rewards in the pool.\n    function involuntaryAuthorizationDecrease(\n        address stakingProvider,\n        uint96 fromAmount,\n        uint96 toAmount\n    ) external onlyStakingContract {\n        authorization.involuntaryAuthorizationDecrease(\n            staking,\n            sortitionPool,\n            stakingProvider,\n            fromAmount,\n            toAmount\n        );\n    }\n\n    /// @notice Updates address of the Random Beacon.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param _randomBeacon Random Beacon address.\n    function upgradeRandomBeacon(IRandomBeacon _randomBeacon)\n        external\n        onlyGovernance\n    {\n        randomBeacon = _randomBeacon;\n        emit RandomBeaconUpgraded(address(_randomBeacon));\n    }\n\n    /// @notice Updates the wallet owner.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters. The wallet owner has to implement `IWalletOwner`\n    ///      interface.\n    /// @param _walletOwner New wallet owner address.\n    function updateWalletOwner(IWalletOwner _walletOwner)\n        external\n        onlyGovernance\n    {\n        walletOwner = _walletOwner;\n        emit WalletOwnerUpdated(address(_walletOwner));\n    }\n\n    /// @notice Updates the values of authorization parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param _minimumAuthorization New minimum authorization amount.\n    /// @param _authorizationDecreaseDelay New authorization decrease delay in\n    ///        seconds.\n    /// @param _authorizationDecreaseChangePeriod New authorization decrease\n    ///        change period in seconds.\n    function updateAuthorizationParameters(\n        uint96 _minimumAuthorization,\n        uint64 _authorizationDecreaseDelay,\n        uint64 _authorizationDecreaseChangePeriod\n    ) external onlyGovernance {\n        authorization.setMinimumAuthorization(_minimumAuthorization);\n        authorization.setAuthorizationDecreaseDelay(\n            _authorizationDecreaseDelay\n        );\n        authorization.setAuthorizationDecreaseChangePeriod(\n            _authorizationDecreaseChangePeriod\n        );\n\n        emit AuthorizationParametersUpdated(\n            _minimumAuthorization,\n            _authorizationDecreaseDelay,\n            _authorizationDecreaseChangePeriod\n        );\n    }\n\n    /// @notice Updates the values of DKG parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param _seedTimeout New seed timeout.\n    /// @param _resultChallengePeriodLength New DKG result challenge period\n    ///        length.\n    /// @param _resultChallengeExtraGas New extra gas value required to be left\n    ///        at the end of the DKG result challenge transaction.\n    /// @param _resultSubmissionTimeout New DKG result submission timeout.\n    /// @param _submitterPrecedencePeriodLength New submitter precedence period\n    ///        length.\n    function updateDkgParameters(\n        uint256 _seedTimeout,\n        uint256 _resultChallengePeriodLength,\n        uint256 _resultChallengeExtraGas,\n        uint256 _resultSubmissionTimeout,\n        uint256 _submitterPrecedencePeriodLength\n    ) external onlyGovernance {\n        dkg.setSeedTimeout(_seedTimeout);\n        dkg.setResultChallengePeriodLength(_resultChallengePeriodLength);\n        dkg.setResultChallengeExtraGas(_resultChallengeExtraGas);\n        dkg.setResultSubmissionTimeout(_resultSubmissionTimeout);\n        dkg.setSubmitterPrecedencePeriodLength(\n            _submitterPrecedencePeriodLength\n        );\n\n        // slither-disable-next-line reentrancy-events\n        emit DkgParametersUpdated(\n            _seedTimeout,\n            _resultChallengePeriodLength,\n            _resultChallengeExtraGas,\n            _resultSubmissionTimeout,\n            _submitterPrecedencePeriodLength\n        );\n    }\n\n    /// @notice Updates the values of reward parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param maliciousDkgResultNotificationRewardMultiplier New value of the\n    ///        DKG malicious result notification reward multiplier.\n    /// @param sortitionPoolRewardsBanDuration New sortition pool rewards\n    ///        ban duration in seconds.\n    function updateRewardParameters(\n        uint256 maliciousDkgResultNotificationRewardMultiplier,\n        uint256 sortitionPoolRewardsBanDuration\n    ) external onlyGovernance {\n        _maliciousDkgResultNotificationRewardMultiplier = maliciousDkgResultNotificationRewardMultiplier;\n        _sortitionPoolRewardsBanDuration = sortitionPoolRewardsBanDuration;\n        emit RewardParametersUpdated(\n            maliciousDkgResultNotificationRewardMultiplier,\n            sortitionPoolRewardsBanDuration\n        );\n    }\n\n    /// @notice Updates the values of slashing parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param maliciousDkgResultSlashingAmount New malicious DKG result\n    ///        slashing amount.\n    function updateSlashingParameters(uint96 maliciousDkgResultSlashingAmount)\n        external\n        onlyGovernance\n    {\n        _maliciousDkgResultSlashingAmount = maliciousDkgResultSlashingAmount;\n        emit SlashingParametersUpdated(maliciousDkgResultSlashingAmount);\n    }\n\n    /// @notice Updates the values of gas-related parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param dkgResultSubmissionGas New DKG result submission gas.\n    /// @param dkgResultApprovalGasOffset New DKG result approval gas offset.\n    /// @param notifyOperatorInactivityGasOffset New operator inactivity\n    ///        notification gas offset.\n    /// @param notifySeedTimeoutGasOffset New seed for DKG delivery timeout\n    ///        notification gas offset.\n    /// @param notifyDkgTimeoutNegativeGasOffset New DKG timeout notification gas\n    ///        offset.\n    function updateGasParameters(\n        uint256 dkgResultSubmissionGas,\n        uint256 dkgResultApprovalGasOffset,\n        uint256 notifyOperatorInactivityGasOffset,\n        uint256 notifySeedTimeoutGasOffset,\n        uint256 notifyDkgTimeoutNegativeGasOffset\n    ) external onlyGovernance {\n        _dkgResultSubmissionGas = dkgResultSubmissionGas;\n        _dkgResultApprovalGasOffset = dkgResultApprovalGasOffset;\n        _notifyOperatorInactivityGasOffset = notifyOperatorInactivityGasOffset;\n        _notifySeedTimeoutGasOffset = notifySeedTimeoutGasOffset;\n        _notifyDkgTimeoutNegativeGasOffset = notifyDkgTimeoutNegativeGasOffset;\n\n        emit GasParametersUpdated(\n            dkgResultSubmissionGas,\n            dkgResultApprovalGasOffset,\n            notifyOperatorInactivityGasOffset,\n            _notifySeedTimeoutGasOffset,\n            _notifyDkgTimeoutNegativeGasOffset\n        );\n    }\n\n    /// @notice Requests a new wallet creation.\n    /// @dev Can be called only by the owner of wallets.\n    ///      It locks the DKG and request a new relay entry. It expects\n    ///      that the DKG process will be started once a new relay entry\n    ///      gets generated.\n    function requestNewWallet() external onlyWalletOwner {\n        dkg.lockState();\n\n        randomBeacon.requestRelayEntry(this);\n    }\n\n    /// @notice Closes an existing wallet. Reverts if wallet with the given ID\n    ///         does not exist or if it has already been closed.\n    /// @param walletID ID of the wallet.\n    /// @dev Only a Wallet Owner can call this function.\n    function closeWallet(bytes32 walletID) external onlyWalletOwner {\n        wallets.deleteWallet(walletID);\n        emit WalletClosed(walletID);\n    }\n\n    /// @notice A callback that is executed once a new relay entry gets\n    ///         generated. It starts the DKG process.\n    /// @dev Can be called only by the random beacon contract.\n    /// @param relayEntry Relay entry.\n    function __beaconCallback(uint256 relayEntry, uint256) external {\n        require(\n            msg.sender == address(randomBeacon),\n            \"Caller is not the Random Beacon\"\n        );\n\n        dkg.start(relayEntry);\n    }\n\n    /// @notice Submits result of DKG protocol.\n    ///         The DKG result consists of result submitting member index,\n    ///         calculated group public key, bytes array of misbehaved members,\n    ///         concatenation of signatures from group members, indices of members\n    ///         corresponding to each signature and the list of group members.\n    ///         The result is registered optimistically and waits for an approval.\n    ///         The result can be challenged when it is believed to be incorrect.\n    ///         The challenge verifies the registered result i.a. it checks if members\n    ///         list corresponds to the expected set of members determined\n    ///         by the sortition pool.\n    /// @dev The message to be signed by each member is keccak256 hash of the\n    ///      chain ID, calculated group public key, misbehaved members indices\n    ///      and DKG start block. The calculated hash should be prefixed with\n    ///      `\\x19Ethereum signed message:\\n` before signing, so the message to\n    ///      sign is:\n    ///      `\\x19Ethereum signed message:\\n${keccak256(chainID,groupPubKey,misbehavedIndices,startBlock)}`\n    /// @param dkgResult DKG result.\n    function submitDkgResult(DKG.Result calldata dkgResult) external {\n        wallets.validatePublicKey(dkgResult.groupPubKey);\n        dkg.submitResult(dkgResult);\n    }\n\n    /// @notice Approves DKG result. Can be called when the challenge period for\n    ///         the submitted result is finished. Considers the submitted result\n    ///         as valid, bans misbehaved group members from the sortition pool\n    ///         rewards, and completes the group creation by activating the\n    ///         candidate group. For the first `resultSubmissionTimeout` blocks\n    ///         after the end of the challenge period can be called only by the\n    ///         DKG result submitter. After that time, can be called by anyone.\n    ///         A new wallet based on the DKG result details.\n    /// @param dkgResult Result to approve. Must match the submitted result\n    ///        stored during `submitDkgResult`.\n    function approveDkgResult(DKG.Result calldata dkgResult) external {\n        uint256 gasStart = gasleft();\n        uint32[] memory misbehavedMembers = dkg.approveResult(dkgResult);\n\n        (bytes32 walletID, bytes32 publicKeyX, bytes32 publicKeyY) = wallets\n            .addWallet(dkgResult.membersHash, dkgResult.groupPubKey);\n\n        emit WalletCreated(walletID, keccak256(abi.encode(dkgResult)));\n\n        if (misbehavedMembers.length > 0) {\n            sortitionPool.setRewardIneligibility(\n                misbehavedMembers,\n                // solhint-disable-next-line not-rely-on-time\n                block.timestamp + _sortitionPoolRewardsBanDuration\n            );\n        }\n\n        walletOwner.__ecdsaWalletCreatedCallback(\n            walletID,\n            publicKeyX,\n            publicKeyY\n        );\n\n        dkg.complete();\n\n        // Refund msg.sender's ETH for DKG result submission and result approval\n        reimbursementPool.refund(\n            _dkgResultSubmissionGas +\n                (gasStart - gasleft()) +\n                _dkgResultApprovalGasOffset,\n            msg.sender\n        );\n    }\n\n    /// @notice Notifies about seed for DKG delivery timeout. It is expected\n    ///         that a seed is delivered by the Random Beacon as a relay entry in a\n    ///         callback function.\n    function notifySeedTimeout() external {\n        uint256 gasStart = gasleft();\n\n        dkg.notifySeedTimeout();\n\n        reimbursementPool.refund(\n            (gasStart - gasleft()) + _notifySeedTimeoutGasOffset,\n            msg.sender\n        );\n    }\n\n    /// @notice Notifies about DKG timeout.\n    function notifyDkgTimeout() external {\n        uint256 gasStart = gasleft();\n\n        dkg.notifyDkgTimeout();\n\n        // Note that the offset is subtracted as it is expected that the cleanup\n        // performed on DKG timeout notification removes data from the storage\n        // which is recovering gas for the transaction.\n        reimbursementPool.refund(\n            (gasStart - gasleft()) - _notifyDkgTimeoutNegativeGasOffset,\n            msg.sender\n        );\n    }\n\n    /// @notice Challenges DKG result. If the submitted result is proved to be\n    ///         invalid it reverts the DKG back to the result submission phase.\n    /// @param dkgResult Result to challenge. Must match the submitted result\n    ///        stored during `submitDkgResult`.\n    /// @dev Due to EIP-150 1/64 of the gas is not forwarded to the call, and\n    ///      will be kept to execute the remaining operations in the function\n    ///      after the call inside the try-catch. To eliminate a class of\n    ///      attacks related to the gas limit manipulation, this function\n    ///      requires an extra amount of gas to be left at the end of the\n    ///      execution.\n    function challengeDkgResult(DKG.Result calldata dkgResult) external {\n        // solhint-disable-next-line avoid-tx-origin\n        require(msg.sender == tx.origin, \"Not EOA\");\n\n        (\n            bytes32 maliciousDkgResultHash,\n            uint32 maliciousDkgResultSubmitterId\n        ) = dkg.challengeResult(dkgResult);\n\n        address maliciousDkgResultSubmitterAddress = sortitionPool\n            .getIDOperator(maliciousDkgResultSubmitterId);\n\n        address[] memory operatorWrapper = new address[](1);\n        operatorWrapper[0] = operatorToStakingProvider(\n            maliciousDkgResultSubmitterAddress\n        );\n\n        try\n            staking.seize(\n                _maliciousDkgResultSlashingAmount,\n                _maliciousDkgResultNotificationRewardMultiplier,\n                msg.sender,\n                operatorWrapper\n            )\n        {\n            // slither-disable-next-line reentrancy-events\n            emit DkgMaliciousResultSlashed(\n                maliciousDkgResultHash,\n                _maliciousDkgResultSlashingAmount,\n                maliciousDkgResultSubmitterAddress\n            );\n        } catch {\n            // Should never happen but we want to ensure a non-critical path\n            // failure from an external contract does not stop the challenge\n            // to complete.\n            emit DkgMaliciousResultSlashingFailed(\n                maliciousDkgResultHash,\n                _maliciousDkgResultSlashingAmount,\n                maliciousDkgResultSubmitterAddress\n            );\n        }\n\n        // Due to EIP-150, 1/64 of the gas is not forwarded to the call, and\n        // will be kept to execute the remaining operations in the function\n        // after the call inside the try-catch.\n        //\n        // To ensure there is no way for the caller to manipulate gas limit in\n        // such a way that the call inside try-catch fails with out-of-gas and\n        // the rest of the function is executed with the remaining 1/64 of gas,\n        // we require an extra gas amount to be left at the end of the call to\n        // `challengeDkgResult`.\n        dkg.requireChallengeExtraGas();\n    }\n\n    /// @notice Notifies about operators who are inactive. Using this function,\n    ///         a majority of the wallet signing group can decide about\n    ///         punishing specific group members who constantly fail doing their\n    ///         job. If the provided claim is proved to be valid and signed by\n    ///         sufficient number of group members, operators of members deemed\n    ///         as inactive are banned from sortition pool rewards for the\n    ///         duration specified by `sortitionPoolRewardsBanDuration` parameter.\n    ///         The function allows to signal about single operators being\n    ///         inactive as well as to signal wallet-wide heartbeat failures\n    ///         that are propagated to the wallet owner who should begin the\n    ///         procedure of moving responsibilities to another wallet given\n    ///         that the wallet who failed the heartbeat may soon be not able to\n    ///         function and provide new signatures.\n    ///         The sender of the claim must be one of the claim signers. This\n    ///         function can be called only for registered wallets\n    /// @param claim Operator inactivity claim.\n    /// @param nonce Current inactivity claim nonce for the given wallet signing\n    ///              group. Must be the same as the stored one.\n    /// @param groupMembers Identifiers of the wallet signing group members.\n    function notifyOperatorInactivity(\n        Inactivity.Claim calldata claim,\n        uint256 nonce,\n        uint32[] calldata groupMembers\n    ) external {\n        uint256 gasStart = gasleft();\n\n        bytes32 walletID = claim.walletID;\n\n        require(nonce == inactivityClaimNonce[walletID], \"Invalid nonce\");\n\n        (bytes32 pubKeyX, bytes32 pubKeyY) = wallets\n            .getWalletPublicKeyCoordinates(walletID);\n        bytes32 memberIdsHash = wallets.getWalletMembersIdsHash(walletID);\n\n        require(\n            memberIdsHash == keccak256(abi.encode(groupMembers)),\n            \"Invalid group members\"\n        );\n\n        uint32[] memory ineligibleOperators = Inactivity.verifyClaim(\n            sortitionPool,\n            claim,\n            bytes.concat(pubKeyX, pubKeyY),\n            nonce,\n            groupMembers\n        );\n\n        inactivityClaimNonce[walletID]++;\n\n        emit InactivityClaimed(walletID, nonce, msg.sender);\n\n        sortitionPool.setRewardIneligibility(\n            ineligibleOperators,\n            // solhint-disable-next-line not-rely-on-time\n            block.timestamp + _sortitionPoolRewardsBanDuration\n        );\n\n        if (claim.heartbeatFailed) {\n            walletOwner.__ecdsaWalletHeartbeatFailedCallback(\n                walletID,\n                pubKeyX,\n                pubKeyY\n            );\n        }\n\n        reimbursementPool.refund(\n            (gasStart - gasleft()) + _notifyOperatorInactivityGasOffset,\n            msg.sender\n        );\n    }\n\n    /// @notice Allows the wallet owner to add all signing group members of the\n    ///         wallet with the given ID to the slashing queue of the staking .\n    ///         contract. The notifier will receive reward per each group member\n    ///         from the staking contract notifiers treasury. The reward is\n    ///         scaled by the `rewardMultiplier` provided as a parameter.\n    /// @param amount Amount of tokens to seize from each signing group member.\n    /// @param rewardMultiplier Fraction of the staking contract notifiers\n    ///        reward the notifier should receive; should be between [0, 100].\n    /// @param notifier Address of the misbehavior notifier.\n    /// @param walletID ID of the wallet.\n    /// @param walletMembersIDs Identifiers of the wallet signing group members.\n    /// @dev Requirements:\n    ///      - The expression `keccak256(abi.encode(walletMembersIDs))` must\n    ///        be exactly the same as the hash stored under `membersIdsHash`\n    ///        for the given `walletID`. Those IDs are not directly stored\n    ///        in the contract for gas efficiency purposes but they can be\n    ///        read from appropriate `DkgResultSubmitted` and `DkgResultApproved`\n    ///        events.\n    ///      - `rewardMultiplier` must be between [0, 100].\n    ///      - This function does revert if staking contract call reverts.\n    ///        The calling code needs to handle the potential revert.\n    function seize(\n        uint96 amount,\n        uint256 rewardMultiplier,\n        address notifier,\n        bytes32 walletID,\n        uint32[] calldata walletMembersIDs\n    ) external onlyWalletOwner {\n        bytes32 memberIdsHash = wallets.getWalletMembersIdsHash(walletID);\n        require(\n            memberIdsHash == keccak256(abi.encode(walletMembersIDs)),\n            \"Invalid wallet members identifiers\"\n        );\n\n        address[] memory groupMembersAddresses = sortitionPool.getIDOperators(\n            walletMembersIDs\n        );\n        address[] memory stakingProvidersAddresses = new address[](\n            walletMembersIDs.length\n        );\n        for (uint256 i = 0; i < groupMembersAddresses.length; i++) {\n            stakingProvidersAddresses[i] = operatorToStakingProvider(\n                groupMembersAddresses[i]\n            );\n        }\n\n        staking.seize(\n            amount,\n            rewardMultiplier,\n            notifier,\n            stakingProvidersAddresses\n        );\n    }\n\n    /// @notice Checks if DKG result is valid for the current DKG.\n    /// @param result DKG result.\n    /// @return True if the result is valid. If the result is invalid it returns\n    ///         false and an error message.\n    function isDkgResultValid(DKG.Result calldata result)\n        external\n        view\n        returns (bool, string memory)\n    {\n        return dkg.isResultValid(result);\n    }\n\n    /// @notice Check current wallet creation state.\n    function getWalletCreationState() external view returns (DKG.State) {\n        return dkg.currentState();\n    }\n\n    /// @notice Checks whether the given operator is a member of the given\n    ///         wallet signing group.\n    /// @param walletID ID of the wallet.\n    /// @param walletMembersIDs Identifiers of the wallet signing group members.\n    /// @param operator Address of the checked operator.\n    /// @param walletMemberIndex Position of the operator in the wallet signing\n    ///        group members list.\n    /// @return True - if the operator is a member of the given wallet signing\n    ///         group. False - otherwise.\n    /// @dev Requirements:\n    ///      - The `operator` parameter must be an actual sortition pool operator.\n    ///      - The expression `keccak256(abi.encode(walletMembersIDs))` must\n    ///        be exactly the same as the hash stored under `membersIdsHash`\n    ///        for the given `walletID`. Those IDs are not directly stored\n    ///        in the contract for gas efficiency purposes but they can be\n    ///        read from appropriate `DkgResultSubmitted` and `DkgResultApproved`\n    ///        events.\n    ///      - The `walletMemberIndex` must be in range [1, walletMembersIDs.length]\n    function isWalletMember(\n        bytes32 walletID,\n        uint32[] calldata walletMembersIDs,\n        address operator,\n        uint256 walletMemberIndex\n    ) external view returns (bool) {\n        uint32 operatorID = sortitionPool.getOperatorID(operator);\n\n        require(operatorID != 0, \"Not a sortition pool operator\");\n\n        bytes32 memberIdsHash = wallets.getWalletMembersIdsHash(walletID);\n\n        require(\n            memberIdsHash == keccak256(abi.encode(walletMembersIDs)),\n            \"Invalid wallet members identifiers\"\n        );\n\n        require(\n            1 <= walletMemberIndex &&\n                walletMemberIndex <= walletMembersIDs.length,\n            \"Wallet member index is out of range\"\n        );\n\n        return walletMembersIDs[walletMemberIndex - 1] == operatorID;\n    }\n\n    /// @notice Checks if awaiting seed timed out.\n    /// @return True if awaiting seed timed out, false otherwise.\n    function hasSeedTimedOut() external view returns (bool) {\n        return dkg.hasSeedTimedOut();\n    }\n\n    /// @notice Checks if DKG timed out. The DKG timeout period includes time required\n    ///         for off-chain protocol execution and time for the result publication\n    ///         for all group members. After this time result cannot be submitted\n    ///         and DKG can be notified about the timeout.\n    /// @return True if DKG timed out, false otherwise.\n    function hasDkgTimedOut() external view returns (bool) {\n        return dkg.hasDkgTimedOut();\n    }\n\n    function getWallet(bytes32 walletID)\n        external\n        view\n        returns (Wallets.Wallet memory)\n    {\n        return wallets.registry[walletID];\n    }\n\n    /// @notice Gets public key of a wallet with a given wallet ID.\n    ///         The public key is returned in an uncompressed format as a 64-byte\n    ///         concatenation of X and Y coordinates.\n    /// @param walletID ID of the wallet.\n    /// @return Uncompressed public key of the wallet.\n    function getWalletPublicKey(bytes32 walletID)\n        external\n        view\n        returns (bytes memory)\n    {\n        return wallets.getWalletPublicKey(walletID);\n    }\n\n    /// @notice Checks if a wallet with the given ID is registered.\n    /// @param walletID Wallet's ID.\n    /// @return True if wallet is registered, false otherwise.\n    function isWalletRegistered(bytes32 walletID) external view returns (bool) {\n        return wallets.isWalletRegistered(walletID);\n    }\n\n    /// @notice The minimum authorization amount required so that operator can\n    ///         participate in ECDSA Wallet operations.\n    function minimumAuthorization() external view returns (uint96) {\n        return authorization.parameters.minimumAuthorization;\n    }\n\n    /// @notice Returns the current value of the staking provider's eligible\n    ///         stake. Eligible stake is defined as the currently authorized\n    ///         stake minus the pending authorization decrease. Eligible stake\n    ///         is what is used for operator's weight in the sortition pool.\n    ///         If the authorized stake minus the pending authorization decrease\n    ///         is below the minimum authorization, eligible stake is 0.\n    function eligibleStake(address stakingProvider)\n        external\n        view\n        returns (uint96)\n    {\n        return authorization.eligibleStake(staking, stakingProvider);\n    }\n\n    /// @notice Returns the amount of rewards available for withdrawal for the\n    ///         given staking provider. Reverts if staking provider has not\n    ///         registered the operator address.\n    function availableRewards(address stakingProvider)\n        external\n        view\n        returns (uint96)\n    {\n        address operator = stakingProviderToOperator(stakingProvider);\n        require(operator != address(0), \"Unknown operator\");\n        return sortitionPool.getAvailableRewards(operator);\n    }\n\n    /// @notice Returns the amount of stake that is pending authorization\n    ///         decrease for the given staking provider. If no authorization\n    ///         decrease has been requested, returns zero.\n    function pendingAuthorizationDecrease(address stakingProvider)\n        external\n        view\n        returns (uint96)\n    {\n        return authorization.pendingAuthorizationDecrease(stakingProvider);\n    }\n\n    /// @notice Returns the remaining time in seconds that needs to pass before\n    ///         the requested authorization decrease can be approved.\n    ///         If the sortition pool state was not updated yet by the operator\n    ///         after requesting the authorization decrease, returns\n    ///         `type(uint64).max`.\n    function remainingAuthorizationDecreaseDelay(address stakingProvider)\n        external\n        view\n        returns (uint64)\n    {\n        return\n            authorization.remainingAuthorizationDecreaseDelay(stakingProvider);\n    }\n\n    /// @notice Returns operator registered for the given staking provider.\n    function stakingProviderToOperator(address stakingProvider)\n        public\n        view\n        returns (address)\n    {\n        return authorization.stakingProviderToOperator[stakingProvider];\n    }\n\n    /// @notice Returns staking provider of the given operator.\n    function operatorToStakingProvider(address operator)\n        public\n        view\n        returns (address)\n    {\n        return authorization.operatorToStakingProvider[operator];\n    }\n\n    /// @notice Checks if the operator's authorized stake is in sync with\n    ///         operator's weight in the sortition pool.\n    ///         If the operator is not in the sortition pool and their\n    ///         authorized stake is non-zero, function returns false.\n    function isOperatorUpToDate(address operator) external view returns (bool) {\n        return\n            authorization.isOperatorUpToDate(staking, sortitionPool, operator);\n    }\n\n    /// @notice Returns true if the given operator is in the sortition pool.\n    ///         Otherwise, returns false.\n    function isOperatorInPool(address operator) external view returns (bool) {\n        return sortitionPool.isOperatorInPool(operator);\n    }\n\n    /// @notice Selects a new group of operators. Can only be called when DKG\n    ///         is in progress and the pool is locked.\n    ///         At least one operator has to be registered in the pool,\n    ///         otherwise the function fails reverting the transaction.\n    /// @return IDs of selected group members.\n    function selectGroup() external view returns (uint32[] memory) {\n        return sortitionPool.selectGroup(DKG.groupSize, bytes32(dkg.seed));\n    }\n\n    /// @notice Retrieves dkg parameters that were set in DKG library.\n    function dkgParameters() external view returns (DKG.Parameters memory) {\n        return dkg.parameters;\n    }\n\n    /// @notice Returns authorization-related parameters.\n    /// @dev The minimum authorization is also returned by `minimumAuthorization()`\n    ///      function, as a requirement of `IApplication` interface.\n    /// @return minimumAuthorization The minimum authorization amount required\n    ///         so that operator can participate in the random beacon. This\n    ///         amount is required to execute slashing for providing a malicious\n    ///         DKG result or when a relay entry times out.\n    /// @return authorizationDecreaseDelay Delay in seconds that needs to pass\n    ///         between the time authorization decrease is requested and the\n    ///         time that request gets approved. Protects against free-riders\n    ///         earning rewards and not being active in the network.\n    /// @return authorizationDecreaseChangePeriod Authorization decrease change\n    ///         period in seconds. It is the time, before authorization decrease\n    ///         delay end, during which the pending authorization decrease\n    ///         request can be overwritten.\n    ///         If set to 0, pending authorization decrease request can not be\n    ///         overwritten until the entire `authorizationDecreaseDelay` ends.\n    ///         If set to value equal `authorizationDecreaseDelay`, request can\n    ///         always be overwritten.\n    function authorizationParameters()\n        external\n        view\n        returns (\n            uint96 minimumAuthorization,\n            uint64 authorizationDecreaseDelay,\n            uint64 authorizationDecreaseChangePeriod\n        )\n    {\n        return (\n            authorization.parameters.minimumAuthorization,\n            authorization.parameters.authorizationDecreaseDelay,\n            authorization.parameters.authorizationDecreaseChangePeriod\n        );\n    }\n\n    /// @notice Retrieves reward-related parameters.\n    /// @return maliciousDkgResultNotificationRewardMultiplier Percentage of the\n    ///         staking contract malicious behavior notification reward which\n    ///         will be transferred to the notifier reporting about a malicious\n    ///         DKG result. Notifiers are rewarded from a notifiers treasury\n    ///         pool. For example, if notification reward is 1000 and the value\n    ///         of the multiplier is 5, the notifier will receive:\n    ///         5% of 1000 = 50 per each operator affected.\n    /// @return sortitionPoolRewardsBanDuration Duration of the sortition pool\n    ///         rewards ban imposed on operators who missed their turn for DKG\n    ///         result submission or who failed a heartbeat.\n    function rewardParameters()\n        external\n        view\n        returns (\n            uint256 maliciousDkgResultNotificationRewardMultiplier,\n            uint256 sortitionPoolRewardsBanDuration\n        )\n    {\n        return (\n            _maliciousDkgResultNotificationRewardMultiplier,\n            _sortitionPoolRewardsBanDuration\n        );\n    }\n\n    /// @notice Retrieves slashing-related parameters.\n    /// @return maliciousDkgResultSlashingAmount Slashing amount for submitting\n    ///         a malicious DKG result. Every DKG result submitted can be\n    ///         challenged for the time of `dkg.resultChallengePeriodLength`.\n    ///         If the DKG result submitted is challenged and proven to be\n    ///         malicious, the operator who submitted the malicious result is\n    ///         slashed for `_maliciousDkgResultSlashingAmount`.\n    function slashingParameters()\n        external\n        view\n        returns (uint96 maliciousDkgResultSlashingAmount)\n    {\n        return _maliciousDkgResultSlashingAmount;\n    }\n\n    /// @notice Retrieves gas-related parameters.\n    /// @return dkgResultSubmissionGas Calculated max gas cost for submitting\n    ///         a DKG result. This will be refunded as part of the DKG approval\n    ///         process. It is in the submitter's interest to not skip his\n    ///         priority turn on the approval, otherwise the refund of the DKG\n    ///         submission will be refunded to another group member that will\n    ///         call the DKG approve function.\n    /// @return dkgResultApprovalGasOffset Gas that is meant to balance the DKG\n    ///         result approval's overall cost. It can be updated by the\n    ///         governance based on the current market conditions.\n    /// @return notifyOperatorInactivityGasOffset Gas that is meant to balance\n    ///         the notification of an operator inactivity. It can be updated by\n    ///         the governance based on the current market conditions.\n    /// @return notifySeedTimeoutGasOffset Gas that is meant to balance the\n    ///         notification of a seed for DKG delivery timeout. It can be updated\n    ///         by the governance based on the current market conditions.\n    /// @return notifyDkgTimeoutNegativeGasOffset Gas that is meant to balance\n    ///         the notification of a DKG protocol execution timeout. It can be\n    ///         updated by the governance based on the current market conditions.\n    function gasParameters()\n        external\n        view\n        returns (\n            uint256 dkgResultSubmissionGas,\n            uint256 dkgResultApprovalGasOffset,\n            uint256 notifyOperatorInactivityGasOffset,\n            uint256 notifySeedTimeoutGasOffset,\n            uint256 notifyDkgTimeoutNegativeGasOffset\n        )\n    {\n        return (\n            _dkgResultSubmissionGas,\n            _dkgResultApprovalGasOffset,\n            _notifyOperatorInactivityGasOffset,\n            _notifySeedTimeoutGasOffset,\n            _notifyDkgTimeoutNegativeGasOffset\n        );\n    }\n}\n"
+      "content": "// SPDX-License-Identifier: GPL-3.0-only\n//\n// ▓▓▌ ▓▓ ▐▓▓ ▓▓▓▓▓▓▓▓▓▓▌▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▄\n// ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▌▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓\n//   ▓▓▓▓▓▓    ▓▓▓▓▓▓▓▀    ▐▓▓▓▓▓▓    ▐▓▓▓▓▓   ▓▓▓▓▓▓     ▓▓▓▓▓   ▐▓▓▓▓▓▌   ▐▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▄▄▓▓▓▓▓▓▓▀      ▐▓▓▓▓▓▓▄▄▄▄         ▓▓▓▓▓▓▄▄▄▄         ▐▓▓▓▓▓▌   ▐▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▓▓▓▓▓▓▓▀        ▐▓▓▓▓▓▓▓▓▓▓         ▓▓▓▓▓▓▓▓▓▓         ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▀▀▓▓▓▓▓▓▄       ▐▓▓▓▓▓▓▀▀▀▀         ▓▓▓▓▓▓▀▀▀▀         ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▀\n//   ▓▓▓▓▓▓   ▀▓▓▓▓▓▓▄     ▐▓▓▓▓▓▓     ▓▓▓▓▓   ▓▓▓▓▓▓     ▓▓▓▓▓   ▐▓▓▓▓▓▌\n// ▓▓▓▓▓▓▓▓▓▓ █▓▓▓▓▓▓▓▓▓ ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓  ▓▓▓▓▓▓▓▓▓▓\n// ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓ ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓  ▓▓▓▓▓▓▓▓▓▓\n//\n//                           Trust math, not hardware.\n\npragma solidity 0.8.17;\n\nimport \"./api/IWalletRegistry.sol\";\nimport \"./api/IWalletOwner.sol\";\nimport \"./libraries/Wallets.sol\";\nimport {EcdsaAuthorization as Authorization} from \"./libraries/EcdsaAuthorization.sol\";\nimport {EcdsaDkg as DKG} from \"./libraries/EcdsaDkg.sol\";\nimport {EcdsaInactivity as Inactivity} from \"./libraries/EcdsaInactivity.sol\";\nimport {EcdsaDkgValidator as DKGValidator} from \"./EcdsaDkgValidator.sol\";\n\nimport \"@keep-network/sortition-pools/contracts/SortitionPool.sol\";\nimport \"@keep-network/random-beacon/contracts/api/IRandomBeacon.sol\";\nimport \"@keep-network/random-beacon/contracts/api/IRandomBeaconConsumer.sol\";\nimport \"@keep-network/random-beacon/contracts/Reimbursable.sol\";\nimport \"@keep-network/random-beacon/contracts/ReimbursementPool.sol\";\nimport \"@keep-network/random-beacon/contracts/Governable.sol\";\n\nimport \"@threshold-network/solidity-contracts/contracts/staking/IApplication.sol\";\nimport \"@threshold-network/solidity-contracts/contracts/staking/IStaking.sol\";\n\nimport \"@openzeppelin/contracts-upgradeable/proxy/utils/Initializable.sol\";\n\ncontract WalletRegistry is\n    IWalletRegistry,\n    IRandomBeaconConsumer,\n    IApplication,\n    Governable,\n    Reimbursable,\n    Initializable\n{\n    using Authorization for Authorization.Data;\n    using DKG for DKG.Data;\n    using Wallets for Wallets.Data;\n\n    // Libraries data storages\n    Authorization.Data internal authorization;\n    DKG.Data internal dkg;\n    Wallets.Data internal wallets;\n\n    /// @notice Slashing amount for submitting a malicious DKG result. Every\n    ///         DKG result submitted can be challenged for the time of\n    ///         `dkg.resultChallengePeriodLength`. If the DKG result submitted\n    ///         is challenged and proven to be malicious, the operator who\n    ///         submitted the malicious result is slashed for\n    ///         `_maliciousDkgResultSlashingAmount`.\n    uint96 internal _maliciousDkgResultSlashingAmount;\n\n    /// @notice Percentage of the staking contract malicious behavior\n    ///         notification reward which will be transferred to the notifier\n    ///         reporting about a malicious DKG result. Notifiers are rewarded\n    ///         from a notifiers treasury pool. For example, if\n    ///         notification reward is 1000 and the value of the multiplier is\n    ///         5, the notifier will receive: 5% of 1000 = 50 per each\n    ///         operator affected.\n    uint256 internal _maliciousDkgResultNotificationRewardMultiplier;\n\n    /// @notice Duration of the sortition pool rewards ban imposed on operators\n    ///         who missed their turn for DKG result submission or who failed\n    ///         a heartbeat.\n    uint256 internal _sortitionPoolRewardsBanDuration;\n\n    /// @notice Calculated max gas cost for submitting a DKG result. This will\n    ///         be refunded as part of the DKG approval process. It is in the\n    ///         submitter's interest to not skip his priority turn on the approval,\n    ///         otherwise the refund of the DKG submission will be refunded to\n    ///         another group member that will call the DKG approve function.\n    uint256 internal _dkgResultSubmissionGas;\n\n    /// @notice Gas that is meant to balance the DKG result approval's overall\n    ///         cost. It can be updated by the governance based on the current\n    ///         market conditions.\n    uint256 internal _dkgResultApprovalGasOffset;\n\n    /// @notice Gas that is meant to balance the notification of an operator\n    ///         inactivity. It can be updated by the governance based on the\n    ///         current market conditions.\n    uint256 internal _notifyOperatorInactivityGasOffset;\n\n    /// @notice Gas that is meant to balance the notification of a seed for DKG\n    ///         delivery timeout. It can be updated by the governance based on the\n    ///         current market conditions.\n    uint256 internal _notifySeedTimeoutGasOffset;\n\n    /// @notice Gas that is meant to balance the notification of a DKG protocol\n    ///         execution timeout. It can be updated by the governance based on the\n    ///         current market conditions.\n    /// @dev The value is subtracted for the refundable gas calculation, as the\n    ///      DKG timeout notification transaction recovers some gas when cleaning\n    ///      up the storage.\n    uint256 internal _notifyDkgTimeoutNegativeGasOffset;\n\n    /// @notice Stores current operator inactivity claim nonce for the given\n    ///         wallet signing group. Each claim is made with a unique nonce\n    ///         which protects against claim replay.\n    mapping(bytes32 => uint256) public inactivityClaimNonce; // walletID -> nonce\n\n    // Address that is set as owner of all wallets. Only this address can request\n    // new wallets creation and manage their state.\n    IWalletOwner public walletOwner;\n\n    // External dependencies\n\n    /// @custom:oz-upgrades-unsafe-allow state-variable-immutable\n    SortitionPool public immutable sortitionPool;\n    /// @custom:oz-upgrades-unsafe-allow state-variable-immutable\n    IStaking public immutable staking;\n    IRandomBeacon public randomBeacon;\n\n    // Events\n    event DkgStarted(uint256 indexed seed);\n\n    event DkgResultSubmitted(\n        bytes32 indexed resultHash,\n        uint256 indexed seed,\n        DKG.Result result\n    );\n\n    event DkgTimedOut();\n\n    event DkgResultApproved(\n        bytes32 indexed resultHash,\n        address indexed approver\n    );\n\n    event DkgResultChallenged(\n        bytes32 indexed resultHash,\n        address indexed challenger,\n        string reason\n    );\n\n    event DkgStateLocked();\n\n    event DkgSeedTimedOut();\n\n    event WalletCreated(\n        bytes32 indexed walletID,\n        bytes32 indexed dkgResultHash\n    );\n\n    event WalletClosed(bytes32 indexed walletID);\n\n    event DkgMaliciousResultSlashed(\n        bytes32 indexed resultHash,\n        uint256 slashingAmount,\n        address maliciousSubmitter\n    );\n\n    event DkgMaliciousResultSlashingFailed(\n        bytes32 indexed resultHash,\n        uint256 slashingAmount,\n        address maliciousSubmitter\n    );\n\n    event AuthorizationParametersUpdated(\n        uint96 minimumAuthorization,\n        uint64 authorizationDecreaseDelay,\n        uint64 authorizationDecreaseChangePeriod\n    );\n\n    event RewardParametersUpdated(\n        uint256 maliciousDkgResultNotificationRewardMultiplier,\n        uint256 sortitionPoolRewardsBanDuration\n    );\n\n    event SlashingParametersUpdated(uint256 maliciousDkgResultSlashingAmount);\n\n    event DkgParametersUpdated(\n        uint256 seedTimeout,\n        uint256 resultChallengePeriodLength,\n        uint256 resultChallengeExtraGas,\n        uint256 resultSubmissionTimeout,\n        uint256 resultSubmitterPrecedencePeriodLength\n    );\n\n    event GasParametersUpdated(\n        uint256 dkgResultSubmissionGas,\n        uint256 dkgResultApprovalGasOffset,\n        uint256 notifyOperatorInactivityGasOffset,\n        uint256 notifySeedTimeoutGasOffset,\n        uint256 notifyDkgTimeoutNegativeGasOffset\n    );\n\n    event RandomBeaconUpgraded(address randomBeacon);\n\n    event WalletOwnerUpdated(address walletOwner);\n\n    event OperatorRegistered(\n        address indexed stakingProvider,\n        address indexed operator\n    );\n\n    event AuthorizationIncreased(\n        address indexed stakingProvider,\n        address indexed operator,\n        uint96 fromAmount,\n        uint96 toAmount\n    );\n\n    event AuthorizationDecreaseRequested(\n        address indexed stakingProvider,\n        address indexed operator,\n        uint96 fromAmount,\n        uint96 toAmount,\n        uint64 decreasingAt\n    );\n\n    event AuthorizationDecreaseApproved(address indexed stakingProvider);\n\n    event InvoluntaryAuthorizationDecreaseFailed(\n        address indexed stakingProvider,\n        address indexed operator,\n        uint96 fromAmount,\n        uint96 toAmount\n    );\n\n    event OperatorJoinedSortitionPool(\n        address indexed stakingProvider,\n        address indexed operator\n    );\n\n    event OperatorStatusUpdated(\n        address indexed stakingProvider,\n        address indexed operator\n    );\n\n    event InactivityClaimed(\n        bytes32 indexed walletID,\n        uint256 nonce,\n        address notifier\n    );\n\n    modifier onlyStakingContract() {\n        require(\n            msg.sender == address(staking),\n            \"Caller is not the staking contract\"\n        );\n        _;\n    }\n\n    /// @notice Reverts if called not by the Wallet Owner.\n    modifier onlyWalletOwner() {\n        require(\n            msg.sender == address(walletOwner),\n            \"Caller is not the Wallet Owner\"\n        );\n        _;\n    }\n\n    modifier onlyReimbursableAdmin() override {\n        require(governance == msg.sender, \"Caller is not the governance\");\n        _;\n    }\n\n    /// @dev Used to initialize immutable variables only, use `initialize` function\n    ///      for upgradable contract initialization on deployment.\n    /// @custom:oz-upgrades-unsafe-allow constructor\n    constructor(SortitionPool _sortitionPool, IStaking _staking) {\n        sortitionPool = _sortitionPool;\n        staking = _staking;\n\n        _disableInitializers();\n    }\n\n    /// @dev Initializes upgradable contract on deployment.\n    function initialize(\n        DKGValidator _ecdsaDkgValidator,\n        IRandomBeacon _randomBeacon,\n        ReimbursementPool _reimbursementPool\n    ) external initializer {\n        randomBeacon = _randomBeacon;\n        reimbursementPool = _reimbursementPool;\n\n        _transferGovernance(msg.sender);\n\n        //\n        // All parameters set in the constructor are initial ones, used at the\n        // moment contracts were deployed for the first time. Parameters are\n        // governable and values assigned in the constructor do not need to\n        // reflect the current ones.\n        //\n\n        // Minimum authorization is 40k T.\n        //\n        // Authorization decrease delay is 45 days.\n        //\n        // Authorization decrease change period is 45 days. It means pending\n        // authorization decrease can be overwritten all the time.\n        authorization.setMinimumAuthorization(40_000e18);\n        authorization.setAuthorizationDecreaseDelay(3_888_000);\n        authorization.setAuthorizationDecreaseChangePeriod(3_888_000);\n\n        // Malicious DKG result slashing amount is set initially to 1% of the\n        // minimum authorization (400 T). This values needs to be increased\n        // significantly once the system is fully launched.\n        //\n        // Notifier of a malicious DKG result receives 100% of the notifier\n        // reward from the staking contract.\n        //\n        // Inactive operators are set as ineligible for rewards for 2 weeks.\n        _maliciousDkgResultSlashingAmount = 400e18;\n        _maliciousDkgResultNotificationRewardMultiplier = 100;\n        _sortitionPoolRewardsBanDuration = 2 weeks;\n\n        // DKG seed timeout is set to 48h assuming 15s block time. The same\n        // value is used by the Random Beacon as a relay entry hard timeout.\n        //\n        // DKG result challenge period length is set to 48h as well, assuming\n        // 15s block time.\n        //\n        // DKG result submission timeout covers:\n        // - 20 blocks required to confirm the DkgStarted event off-chain\n        // - 1 attempt of the off-chain protocol that takes 216 blocks at most\n        // - 3 blocks to submit the result for each of the 100 members\n        // That gives: 20 + (1 * 216) + (3 * 100) = 536\n        //\n        //\n        // The original DKG result submitter has 20 blocks to approve it before\n        // anyone else can do that.\n        //\n        // With these parameters, the happy path takes no more than 104 hours.\n        // In practice, it should take about 48 hours (just the challenge time).\n        dkg.init(sortitionPool, _ecdsaDkgValidator);\n        dkg.setSeedTimeout(11_520);\n        dkg.setResultChallengePeriodLength(11_520);\n        dkg.setResultChallengeExtraGas(50_000);\n        dkg.setResultSubmissionTimeout(536);\n        dkg.setSubmitterPrecedencePeriodLength(20);\n\n        // Gas parameters were adjusted based on Ethereum state in April 2022.\n        // If the cost of EVM opcodes change over time, these parameters will\n        // have to be updated.\n        _dkgResultSubmissionGas = 290_000;\n        _dkgResultApprovalGasOffset = 72_000;\n        _notifyOperatorInactivityGasOffset = 93_000;\n        _notifySeedTimeoutGasOffset = 7_250;\n        _notifyDkgTimeoutNegativeGasOffset = 2_300;\n    }\n\n    /// @notice Withdraws application rewards for the given staking provider.\n    ///         Rewards are withdrawn to the staking provider's beneficiary\n    ///         address set in the staking contract. Reverts if staking provider\n    ///         has not registered the operator address.\n    /// @dev Emits `RewardsWithdrawn` event.\n    function withdrawRewards(address stakingProvider) external {\n        address operator = stakingProviderToOperator(stakingProvider);\n        require(operator != address(0), \"Unknown operator\");\n        (, address beneficiary, ) = staking.rolesOf(stakingProvider);\n        uint96 amount = sortitionPool.withdrawRewards(operator, beneficiary);\n        // slither-disable-next-line reentrancy-events\n        emit RewardsWithdrawn(stakingProvider, amount);\n    }\n\n    /// @notice Withdraws rewards belonging to operators marked as ineligible\n    ///         for sortition pool rewards.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract.\n    /// @param recipient Recipient of withdrawn rewards.\n    function withdrawIneligibleRewards(address recipient)\n        external\n        onlyGovernance\n    {\n        sortitionPool.withdrawIneligible(recipient);\n    }\n\n    /// @notice Used by staking provider to set operator address that will\n    ///         operate ECDSA node. The given staking provider can set operator\n    ///         address only one time. The operator address can not be changed\n    ///         and must be unique. Reverts if the operator is already set for\n    ///         the staking provider or if the operator address is already in\n    ///         use. Reverts if there is a pending authorization decrease for\n    ///         the staking provider.\n    function registerOperator(address operator) external {\n        authorization.registerOperator(operator);\n    }\n\n    /// @notice Lets the operator join the sortition pool. The operator address\n    ///         must be known - before calling this function, it has to be\n    ///         appointed by the staking provider by calling `registerOperator`.\n    ///         Also, the operator must have the minimum authorization required\n    ///         by ECDSA. Function reverts if there is no minimum stake\n    ///         authorized or if the operator is not known. If there was an\n    ///         authorization decrease requested, it is activated by starting\n    ///         the authorization decrease delay.\n    function joinSortitionPool() external {\n        authorization.joinSortitionPool(staking, sortitionPool);\n    }\n\n    /// @notice Updates status of the operator in the sortition pool. If there\n    ///         was an authorization decrease requested, it is activated by\n    ///         starting the authorization decrease delay.\n    ///         Function reverts if the operator is not known.\n    function updateOperatorStatus(address operator) external {\n        authorization.updateOperatorStatus(staking, sortitionPool, operator);\n    }\n\n    /// @notice Used by T staking contract to inform the application that the\n    ///         authorized stake amount for the given staking provider increased.\n    ///\n    ///         Reverts if the authorization amount is below the minimum.\n    ///\n    ///         The function is not updating the sortition pool. Sortition pool\n    ///         state needs to be updated by the operator with a call to\n    ///         `joinSortitionPool` or `updateOperatorStatus`.\n    ///\n    /// @dev Can only be called by T staking contract.\n    function authorizationIncreased(\n        address stakingProvider,\n        uint96 fromAmount,\n        uint96 toAmount\n    ) external onlyStakingContract {\n        authorization.authorizationIncreased(\n            stakingProvider,\n            fromAmount,\n            toAmount\n        );\n    }\n\n    /// @notice Used by T staking contract to inform the application that the\n    ///         authorization decrease for the given staking provider has been\n    ///         requested.\n    ///\n    ///         Reverts if the amount after deauthorization would be non-zero\n    ///         and lower than the minimum authorization.\n    ///\n    ///         If the operator is not known (`registerOperator` was not called)\n    ///         it lets to `approveAuthorizationDecrease` immediatelly. If the\n    ///         operator is known (`registerOperator` was called), the operator\n    ///         needs to update state of the sortition pool with a call to\n    ///         `joinSortitionPool` or `updateOperatorStatus`. After the\n    ///         sortition pool state is in sync, authorization decrease delay\n    ///         starts.\n    ///\n    ///         After authorization decrease delay passes, authorization\n    ///         decrease request needs to be approved with a call to\n    ///         `approveAuthorizationDecrease` function.\n    ///\n    ///         If there is a pending authorization decrease request, it is\n    ///         overwritten.\n    ///\n    /// @dev Can only be called by T staking contract.\n    function authorizationDecreaseRequested(\n        address stakingProvider,\n        uint96 fromAmount,\n        uint96 toAmount\n    ) external onlyStakingContract {\n        authorization.authorizationDecreaseRequested(\n            stakingProvider,\n            fromAmount,\n            toAmount\n        );\n    }\n\n    /// @notice Approves the previously registered authorization decrease\n    ///         request. Reverts if authorization decrease delay has not passed\n    ///         yet or if the authorization decrease was not requested for the\n    ///         given staking provider.\n    function approveAuthorizationDecrease(address stakingProvider) external {\n        authorization.approveAuthorizationDecrease(staking, stakingProvider);\n    }\n\n    /// @notice Used by T staking contract to inform the application the\n    ///         authorization has been decreased for the given staking provider\n    ///         involuntarily, as a result of slashing.\n    ///\n    ///         If the operator is not known (`registerOperator` was not called)\n    ///         the function does nothing. The operator was never in a sortition\n    ///         pool so there is nothing to update.\n    ///\n    ///         If the operator is known, sortition pool is unlocked, and the\n    ///         operator is in the sortition pool, the sortition pool state is\n    ///         updated. If the sortition pool is locked, update needs to be\n    ///         postponed. Every other staker is incentivized to call\n    ///         `updateOperatorStatus` for the problematic operator to increase\n    ///         their own rewards in the pool.\n    function involuntaryAuthorizationDecrease(\n        address stakingProvider,\n        uint96 fromAmount,\n        uint96 toAmount\n    ) external onlyStakingContract {\n        authorization.involuntaryAuthorizationDecrease(\n            staking,\n            sortitionPool,\n            stakingProvider,\n            fromAmount,\n            toAmount\n        );\n    }\n\n    /// @notice Updates address of the Random Beacon.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param _randomBeacon Random Beacon address.\n    function upgradeRandomBeacon(IRandomBeacon _randomBeacon)\n        external\n        onlyGovernance\n    {\n        randomBeacon = _randomBeacon;\n        emit RandomBeaconUpgraded(address(_randomBeacon));\n    }\n\n    /// @notice Updates the wallet owner.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters. The wallet owner has to implement `IWalletOwner`\n    ///      interface.\n    /// @param _walletOwner New wallet owner address.\n    function updateWalletOwner(IWalletOwner _walletOwner)\n        external\n        onlyGovernance\n    {\n        walletOwner = _walletOwner;\n        emit WalletOwnerUpdated(address(_walletOwner));\n    }\n\n    /// @notice Updates the values of authorization parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param _minimumAuthorization New minimum authorization amount.\n    /// @param _authorizationDecreaseDelay New authorization decrease delay in\n    ///        seconds.\n    /// @param _authorizationDecreaseChangePeriod New authorization decrease\n    ///        change period in seconds.\n    function updateAuthorizationParameters(\n        uint96 _minimumAuthorization,\n        uint64 _authorizationDecreaseDelay,\n        uint64 _authorizationDecreaseChangePeriod\n    ) external onlyGovernance {\n        authorization.setMinimumAuthorization(_minimumAuthorization);\n        authorization.setAuthorizationDecreaseDelay(\n            _authorizationDecreaseDelay\n        );\n        authorization.setAuthorizationDecreaseChangePeriod(\n            _authorizationDecreaseChangePeriod\n        );\n\n        emit AuthorizationParametersUpdated(\n            _minimumAuthorization,\n            _authorizationDecreaseDelay,\n            _authorizationDecreaseChangePeriod\n        );\n    }\n\n    /// @notice Updates the values of DKG parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param _seedTimeout New seed timeout.\n    /// @param _resultChallengePeriodLength New DKG result challenge period\n    ///        length.\n    /// @param _resultChallengeExtraGas New extra gas value required to be left\n    ///        at the end of the DKG result challenge transaction.\n    /// @param _resultSubmissionTimeout New DKG result submission timeout.\n    /// @param _submitterPrecedencePeriodLength New submitter precedence period\n    ///        length.\n    function updateDkgParameters(\n        uint256 _seedTimeout,\n        uint256 _resultChallengePeriodLength,\n        uint256 _resultChallengeExtraGas,\n        uint256 _resultSubmissionTimeout,\n        uint256 _submitterPrecedencePeriodLength\n    ) external onlyGovernance {\n        dkg.setSeedTimeout(_seedTimeout);\n        dkg.setResultChallengePeriodLength(_resultChallengePeriodLength);\n        dkg.setResultChallengeExtraGas(_resultChallengeExtraGas);\n        dkg.setResultSubmissionTimeout(_resultSubmissionTimeout);\n        dkg.setSubmitterPrecedencePeriodLength(\n            _submitterPrecedencePeriodLength\n        );\n\n        // slither-disable-next-line reentrancy-events\n        emit DkgParametersUpdated(\n            _seedTimeout,\n            _resultChallengePeriodLength,\n            _resultChallengeExtraGas,\n            _resultSubmissionTimeout,\n            _submitterPrecedencePeriodLength\n        );\n    }\n\n    /// @notice Updates the values of reward parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param maliciousDkgResultNotificationRewardMultiplier New value of the\n    ///        DKG malicious result notification reward multiplier.\n    /// @param sortitionPoolRewardsBanDuration New sortition pool rewards\n    ///        ban duration in seconds.\n    function updateRewardParameters(\n        uint256 maliciousDkgResultNotificationRewardMultiplier,\n        uint256 sortitionPoolRewardsBanDuration\n    ) external onlyGovernance {\n        _maliciousDkgResultNotificationRewardMultiplier = maliciousDkgResultNotificationRewardMultiplier;\n        _sortitionPoolRewardsBanDuration = sortitionPoolRewardsBanDuration;\n        emit RewardParametersUpdated(\n            maliciousDkgResultNotificationRewardMultiplier,\n            sortitionPoolRewardsBanDuration\n        );\n    }\n\n    /// @notice Updates the values of slashing parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param maliciousDkgResultSlashingAmount New malicious DKG result\n    ///        slashing amount.\n    function updateSlashingParameters(uint96 maliciousDkgResultSlashingAmount)\n        external\n        onlyGovernance\n    {\n        _maliciousDkgResultSlashingAmount = maliciousDkgResultSlashingAmount;\n        emit SlashingParametersUpdated(maliciousDkgResultSlashingAmount);\n    }\n\n    /// @notice Updates the values of gas-related parameters.\n    /// @dev Can be called only by the contract guvnor, which should be the\n    ///      wallet registry governance contract. The caller is responsible for\n    ///      validating parameters.\n    /// @param dkgResultSubmissionGas New DKG result submission gas.\n    /// @param dkgResultApprovalGasOffset New DKG result approval gas offset.\n    /// @param notifyOperatorInactivityGasOffset New operator inactivity\n    ///        notification gas offset.\n    /// @param notifySeedTimeoutGasOffset New seed for DKG delivery timeout\n    ///        notification gas offset.\n    /// @param notifyDkgTimeoutNegativeGasOffset New DKG timeout notification gas\n    ///        offset.\n    function updateGasParameters(\n        uint256 dkgResultSubmissionGas,\n        uint256 dkgResultApprovalGasOffset,\n        uint256 notifyOperatorInactivityGasOffset,\n        uint256 notifySeedTimeoutGasOffset,\n        uint256 notifyDkgTimeoutNegativeGasOffset\n    ) external onlyGovernance {\n        _dkgResultSubmissionGas = dkgResultSubmissionGas;\n        _dkgResultApprovalGasOffset = dkgResultApprovalGasOffset;\n        _notifyOperatorInactivityGasOffset = notifyOperatorInactivityGasOffset;\n        _notifySeedTimeoutGasOffset = notifySeedTimeoutGasOffset;\n        _notifyDkgTimeoutNegativeGasOffset = notifyDkgTimeoutNegativeGasOffset;\n\n        emit GasParametersUpdated(\n            dkgResultSubmissionGas,\n            dkgResultApprovalGasOffset,\n            notifyOperatorInactivityGasOffset,\n            _notifySeedTimeoutGasOffset,\n            _notifyDkgTimeoutNegativeGasOffset\n        );\n    }\n\n    /// @notice Requests a new wallet creation.\n    /// @dev Can be called only by the owner of wallets.\n    ///      It locks the DKG and request a new relay entry. It expects\n    ///      that the DKG process will be started once a new relay entry\n    ///      gets generated.\n    function requestNewWallet() external onlyWalletOwner {\n        dkg.lockState();\n\n        randomBeacon.requestRelayEntry(this);\n    }\n\n    /// @notice Closes an existing wallet. Reverts if wallet with the given ID\n    ///         does not exist or if it has already been closed.\n    /// @param walletID ID of the wallet.\n    /// @dev Only a Wallet Owner can call this function.\n    function closeWallet(bytes32 walletID) external onlyWalletOwner {\n        wallets.deleteWallet(walletID);\n        emit WalletClosed(walletID);\n    }\n\n    /// @notice A callback that is executed once a new relay entry gets\n    ///         generated. It starts the DKG process.\n    /// @dev Can be called only by the random beacon contract.\n    /// @param relayEntry Relay entry.\n    function __beaconCallback(uint256 relayEntry, uint256) external {\n        require(\n            msg.sender == address(randomBeacon),\n            \"Caller is not the Random Beacon\"\n        );\n\n        dkg.start(relayEntry);\n    }\n\n    /// @notice Submits result of DKG protocol.\n    ///         The DKG result consists of result submitting member index,\n    ///         calculated group public key, bytes array of misbehaved members,\n    ///         concatenation of signatures from group members, indices of members\n    ///         corresponding to each signature and the list of group members.\n    ///         The result is registered optimistically and waits for an approval.\n    ///         The result can be challenged when it is believed to be incorrect.\n    ///         The challenge verifies the registered result i.a. it checks if members\n    ///         list corresponds to the expected set of members determined\n    ///         by the sortition pool.\n    /// @dev The message to be signed by each member is keccak256 hash of the\n    ///      chain ID, calculated group public key, misbehaved members indices\n    ///      and DKG start block. The calculated hash should be prefixed with\n    ///      `\\x19Ethereum signed message:\\n` before signing, so the message to\n    ///      sign is:\n    ///      `\\x19Ethereum signed message:\\n${keccak256(chainID,groupPubKey,misbehavedIndices,startBlock)}`\n    /// @param dkgResult DKG result.\n    function submitDkgResult(DKG.Result calldata dkgResult) external {\n        wallets.validatePublicKey(dkgResult.groupPubKey);\n        dkg.submitResult(dkgResult);\n    }\n\n    /// @notice Approves DKG result. Can be called when the challenge period for\n    ///         the submitted result is finished. Considers the submitted result\n    ///         as valid, bans misbehaved group members from the sortition pool\n    ///         rewards, and completes the group creation by activating the\n    ///         candidate group. For the first `resultSubmissionTimeout` blocks\n    ///         after the end of the challenge period can be called only by the\n    ///         DKG result submitter. After that time, can be called by anyone.\n    ///         A new wallet based on the DKG result details.\n    /// @param dkgResult Result to approve. Must match the submitted result\n    ///        stored during `submitDkgResult`.\n    function approveDkgResult(DKG.Result calldata dkgResult) external {\n        uint256 gasStart = gasleft();\n        uint32[] memory misbehavedMembers = dkg.approveResult(dkgResult);\n\n        (bytes32 walletID, bytes32 publicKeyX, bytes32 publicKeyY) = wallets\n            .addWallet(dkgResult.membersHash, dkgResult.groupPubKey);\n\n        emit WalletCreated(walletID, keccak256(abi.encode(dkgResult)));\n\n        if (misbehavedMembers.length > 0) {\n            sortitionPool.setRewardIneligibility(\n                misbehavedMembers,\n                // solhint-disable-next-line not-rely-on-time\n                block.timestamp + _sortitionPoolRewardsBanDuration\n            );\n        }\n\n        walletOwner.__ecdsaWalletCreatedCallback(\n            walletID,\n            publicKeyX,\n            publicKeyY\n        );\n\n        dkg.complete();\n\n        // Refund msg.sender's ETH for DKG result submission and result approval\n        reimbursementPool.refund(\n            _dkgResultSubmissionGas +\n                (gasStart - gasleft()) +\n                _dkgResultApprovalGasOffset,\n            msg.sender\n        );\n    }\n\n    /// @notice Notifies about seed for DKG delivery timeout. It is expected\n    ///         that a seed is delivered by the Random Beacon as a relay entry in a\n    ///         callback function.\n    function notifySeedTimeout() external {\n        uint256 gasStart = gasleft();\n\n        dkg.notifySeedTimeout();\n\n        reimbursementPool.refund(\n            (gasStart - gasleft()) + _notifySeedTimeoutGasOffset,\n            msg.sender\n        );\n    }\n\n    /// @notice Notifies about DKG timeout.\n    function notifyDkgTimeout() external {\n        uint256 gasStart = gasleft();\n\n        dkg.notifyDkgTimeout();\n\n        // Note that the offset is subtracted as it is expected that the cleanup\n        // performed on DKG timeout notification removes data from the storage\n        // which is recovering gas for the transaction.\n        reimbursementPool.refund(\n            (gasStart - gasleft()) - _notifyDkgTimeoutNegativeGasOffset,\n            msg.sender\n        );\n    }\n\n    /// @notice Challenges DKG result. If the submitted result is proved to be\n    ///         invalid it reverts the DKG back to the result submission phase.\n    /// @param dkgResult Result to challenge. Must match the submitted result\n    ///        stored during `submitDkgResult`.\n    /// @dev Due to EIP-150 1/64 of the gas is not forwarded to the call, and\n    ///      will be kept to execute the remaining operations in the function\n    ///      after the call inside the try-catch. To eliminate a class of\n    ///      attacks related to the gas limit manipulation, this function\n    ///      requires an extra amount of gas to be left at the end of the\n    ///      execution.\n    function challengeDkgResult(DKG.Result calldata dkgResult) external {\n        // solhint-disable-next-line avoid-tx-origin\n        require(msg.sender == tx.origin, \"Not EOA\");\n\n        (\n            bytes32 maliciousDkgResultHash,\n            uint32 maliciousDkgResultSubmitterId\n        ) = dkg.challengeResult(dkgResult);\n\n        address maliciousDkgResultSubmitterAddress = sortitionPool\n            .getIDOperator(maliciousDkgResultSubmitterId);\n\n        address[] memory operatorWrapper = new address[](1);\n        operatorWrapper[0] = operatorToStakingProvider(\n            maliciousDkgResultSubmitterAddress\n        );\n\n        try\n            staking.seize(\n                _maliciousDkgResultSlashingAmount,\n                _maliciousDkgResultNotificationRewardMultiplier,\n                msg.sender,\n                operatorWrapper\n            )\n        {\n            // slither-disable-next-line reentrancy-events\n            emit DkgMaliciousResultSlashed(\n                maliciousDkgResultHash,\n                _maliciousDkgResultSlashingAmount,\n                maliciousDkgResultSubmitterAddress\n            );\n        } catch {\n            // Should never happen but we want to ensure a non-critical path\n            // failure from an external contract does not stop the challenge\n            // to complete.\n            emit DkgMaliciousResultSlashingFailed(\n                maliciousDkgResultHash,\n                _maliciousDkgResultSlashingAmount,\n                maliciousDkgResultSubmitterAddress\n            );\n        }\n\n        // Due to EIP-150, 1/64 of the gas is not forwarded to the call, and\n        // will be kept to execute the remaining operations in the function\n        // after the call inside the try-catch.\n        //\n        // To ensure there is no way for the caller to manipulate gas limit in\n        // such a way that the call inside try-catch fails with out-of-gas and\n        // the rest of the function is executed with the remaining 1/64 of gas,\n        // we require an extra gas amount to be left at the end of the call to\n        // `challengeDkgResult`.\n        dkg.requireChallengeExtraGas();\n    }\n\n    /// @notice Notifies about operators who are inactive. Using this function,\n    ///         a majority of the wallet signing group can decide about\n    ///         punishing specific group members who constantly fail doing their\n    ///         job. If the provided claim is proved to be valid and signed by\n    ///         sufficient number of group members, operators of members deemed\n    ///         as inactive are banned from sortition pool rewards for the\n    ///         duration specified by `sortitionPoolRewardsBanDuration` parameter.\n    ///         The function allows to signal about single operators being\n    ///         inactive as well as to signal wallet-wide heartbeat failures\n    ///         that are propagated to the wallet owner who should begin the\n    ///         procedure of moving responsibilities to another wallet given\n    ///         that the wallet who failed the heartbeat may soon be not able to\n    ///         function and provide new signatures.\n    ///         The sender of the claim must be one of the claim signers. This\n    ///         function can be called only for registered wallets\n    /// @param claim Operator inactivity claim.\n    /// @param nonce Current inactivity claim nonce for the given wallet signing\n    ///              group. Must be the same as the stored one.\n    /// @param groupMembers Identifiers of the wallet signing group members.\n    function notifyOperatorInactivity(\n        Inactivity.Claim calldata claim,\n        uint256 nonce,\n        uint32[] calldata groupMembers\n    ) external {\n        uint256 gasStart = gasleft();\n\n        bytes32 walletID = claim.walletID;\n\n        require(nonce == inactivityClaimNonce[walletID], \"Invalid nonce\");\n\n        (bytes32 pubKeyX, bytes32 pubKeyY) = wallets\n            .getWalletPublicKeyCoordinates(walletID);\n        bytes32 memberIdsHash = wallets.getWalletMembersIdsHash(walletID);\n\n        require(\n            memberIdsHash == keccak256(abi.encode(groupMembers)),\n            \"Invalid group members\"\n        );\n\n        uint32[] memory ineligibleOperators = Inactivity.verifyClaim(\n            sortitionPool,\n            claim,\n            bytes.concat(pubKeyX, pubKeyY),\n            nonce,\n            groupMembers\n        );\n\n        inactivityClaimNonce[walletID]++;\n\n        emit InactivityClaimed(walletID, nonce, msg.sender);\n\n        sortitionPool.setRewardIneligibility(\n            ineligibleOperators,\n            // solhint-disable-next-line not-rely-on-time\n            block.timestamp + _sortitionPoolRewardsBanDuration\n        );\n\n        if (claim.heartbeatFailed) {\n            walletOwner.__ecdsaWalletHeartbeatFailedCallback(\n                walletID,\n                pubKeyX,\n                pubKeyY\n            );\n        }\n\n        reimbursementPool.refund(\n            (gasStart - gasleft()) + _notifyOperatorInactivityGasOffset,\n            msg.sender\n        );\n    }\n\n    /// @notice Allows the wallet owner to add all signing group members of the\n    ///         wallet with the given ID to the slashing queue of the staking .\n    ///         contract. The notifier will receive reward per each group member\n    ///         from the staking contract notifiers treasury. The reward is\n    ///         scaled by the `rewardMultiplier` provided as a parameter.\n    /// @param amount Amount of tokens to seize from each signing group member.\n    /// @param rewardMultiplier Fraction of the staking contract notifiers\n    ///        reward the notifier should receive; should be between [0, 100].\n    /// @param notifier Address of the misbehavior notifier.\n    /// @param walletID ID of the wallet.\n    /// @param walletMembersIDs Identifiers of the wallet signing group members.\n    /// @dev Requirements:\n    ///      - The expression `keccak256(abi.encode(walletMembersIDs))` must\n    ///        be exactly the same as the hash stored under `membersIdsHash`\n    ///        for the given `walletID`. Those IDs are not directly stored\n    ///        in the contract for gas efficiency purposes but they can be\n    ///        read from appropriate `DkgResultSubmitted` and `DkgResultApproved`\n    ///        events.\n    ///      - `rewardMultiplier` must be between [0, 100].\n    ///      - This function does revert if staking contract call reverts.\n    ///        The calling code needs to handle the potential revert.\n    function seize(\n        uint96 amount,\n        uint256 rewardMultiplier,\n        address notifier,\n        bytes32 walletID,\n        uint32[] calldata walletMembersIDs\n    ) external onlyWalletOwner {\n        bytes32 memberIdsHash = wallets.getWalletMembersIdsHash(walletID);\n        require(\n            memberIdsHash == keccak256(abi.encode(walletMembersIDs)),\n            \"Invalid wallet members identifiers\"\n        );\n\n        address[] memory groupMembersAddresses = sortitionPool.getIDOperators(\n            walletMembersIDs\n        );\n        address[] memory stakingProvidersAddresses = new address[](\n            walletMembersIDs.length\n        );\n        for (uint256 i = 0; i < groupMembersAddresses.length; i++) {\n            stakingProvidersAddresses[i] = operatorToStakingProvider(\n                groupMembersAddresses[i]\n            );\n        }\n\n        staking.seize(\n            amount,\n            rewardMultiplier,\n            notifier,\n            stakingProvidersAddresses\n        );\n    }\n\n    /// @notice Checks if DKG result is valid for the current DKG.\n    /// @param result DKG result.\n    /// @return True if the result is valid. If the result is invalid it returns\n    ///         false and an error message.\n    function isDkgResultValid(DKG.Result calldata result)\n        external\n        view\n        returns (bool, string memory)\n    {\n        return dkg.isResultValid(result);\n    }\n\n    /// @notice Check current wallet creation state.\n    function getWalletCreationState() external view returns (DKG.State) {\n        return dkg.currentState();\n    }\n\n    /// @notice Checks whether the given operator is a member of the given\n    ///         wallet signing group.\n    /// @param walletID ID of the wallet.\n    /// @param walletMembersIDs Identifiers of the wallet signing group members.\n    /// @param operator Address of the checked operator.\n    /// @param walletMemberIndex Position of the operator in the wallet signing\n    ///        group members list.\n    /// @return True - if the operator is a member of the given wallet signing\n    ///         group. False - otherwise.\n    /// @dev Requirements:\n    ///      - The `operator` parameter must be an actual sortition pool operator.\n    ///      - The expression `keccak256(abi.encode(walletMembersIDs))` must\n    ///        be exactly the same as the hash stored under `membersIdsHash`\n    ///        for the given `walletID`. Those IDs are not directly stored\n    ///        in the contract for gas efficiency purposes but they can be\n    ///        read from appropriate `DkgResultSubmitted` and `DkgResultApproved`\n    ///        events.\n    ///      - The `walletMemberIndex` must be in range [1, walletMembersIDs.length]\n    function isWalletMember(\n        bytes32 walletID,\n        uint32[] calldata walletMembersIDs,\n        address operator,\n        uint256 walletMemberIndex\n    ) external view returns (bool) {\n        uint32 operatorID = sortitionPool.getOperatorID(operator);\n\n        require(operatorID != 0, \"Not a sortition pool operator\");\n\n        bytes32 memberIdsHash = wallets.getWalletMembersIdsHash(walletID);\n\n        require(\n            memberIdsHash == keccak256(abi.encode(walletMembersIDs)),\n            \"Invalid wallet members identifiers\"\n        );\n\n        require(\n            1 <= walletMemberIndex &&\n                walletMemberIndex <= walletMembersIDs.length,\n            \"Wallet member index is out of range\"\n        );\n\n        return walletMembersIDs[walletMemberIndex - 1] == operatorID;\n    }\n\n    /// @notice Checks if awaiting seed timed out.\n    /// @return True if awaiting seed timed out, false otherwise.\n    function hasSeedTimedOut() external view returns (bool) {\n        return dkg.hasSeedTimedOut();\n    }\n\n    /// @notice Checks if DKG timed out. The DKG timeout period includes time required\n    ///         for off-chain protocol execution and time for the result publication\n    ///         for all group members. After this time result cannot be submitted\n    ///         and DKG can be notified about the timeout.\n    /// @return True if DKG timed out, false otherwise.\n    function hasDkgTimedOut() external view returns (bool) {\n        return dkg.hasDkgTimedOut();\n    }\n\n    function getWallet(bytes32 walletID)\n        external\n        view\n        returns (Wallets.Wallet memory)\n    {\n        return wallets.registry[walletID];\n    }\n\n    /// @notice Gets public key of a wallet with a given wallet ID.\n    ///         The public key is returned in an uncompressed format as a 64-byte\n    ///         concatenation of X and Y coordinates.\n    /// @param walletID ID of the wallet.\n    /// @return Uncompressed public key of the wallet.\n    function getWalletPublicKey(bytes32 walletID)\n        external\n        view\n        returns (bytes memory)\n    {\n        return wallets.getWalletPublicKey(walletID);\n    }\n\n    /// @notice Checks if a wallet with the given ID is registered.\n    /// @param walletID Wallet's ID.\n    /// @return True if wallet is registered, false otherwise.\n    function isWalletRegistered(bytes32 walletID) external view returns (bool) {\n        return wallets.isWalletRegistered(walletID);\n    }\n\n    /// @notice The minimum authorization amount required so that operator can\n    ///         participate in ECDSA Wallet operations.\n    function minimumAuthorization() external view returns (uint96) {\n        return authorization.parameters.minimumAuthorization;\n    }\n\n    /// @notice Returns the current value of the staking provider's eligible\n    ///         stake. Eligible stake is defined as the currently authorized\n    ///         stake minus the pending authorization decrease. Eligible stake\n    ///         is what is used for operator's weight in the sortition pool.\n    ///         If the authorized stake minus the pending authorization decrease\n    ///         is below the minimum authorization, eligible stake is 0.\n    function eligibleStake(address stakingProvider)\n        external\n        view\n        returns (uint96)\n    {\n        return authorization.eligibleStake(staking, stakingProvider);\n    }\n\n    /// @notice Returns the amount of rewards available for withdrawal for the\n    ///         given staking provider. Reverts if staking provider has not\n    ///         registered the operator address.\n    function availableRewards(address stakingProvider)\n        external\n        view\n        returns (uint96)\n    {\n        address operator = stakingProviderToOperator(stakingProvider);\n        require(operator != address(0), \"Unknown operator\");\n        return sortitionPool.getAvailableRewards(operator);\n    }\n\n    /// @notice Returns the amount of stake that is pending authorization\n    ///         decrease for the given staking provider. If no authorization\n    ///         decrease has been requested, returns zero.\n    function pendingAuthorizationDecrease(address stakingProvider)\n        external\n        view\n        returns (uint96)\n    {\n        return authorization.pendingAuthorizationDecrease(stakingProvider);\n    }\n\n    /// @notice Returns the remaining time in seconds that needs to pass before\n    ///         the requested authorization decrease can be approved.\n    ///         If the sortition pool state was not updated yet by the operator\n    ///         after requesting the authorization decrease, returns\n    ///         `type(uint64).max`.\n    function remainingAuthorizationDecreaseDelay(address stakingProvider)\n        external\n        view\n        returns (uint64)\n    {\n        return\n            authorization.remainingAuthorizationDecreaseDelay(stakingProvider);\n    }\n\n    /// @notice Returns operator registered for the given staking provider.\n    function stakingProviderToOperator(address stakingProvider)\n        public\n        view\n        returns (address)\n    {\n        return authorization.stakingProviderToOperator[stakingProvider];\n    }\n\n    /// @notice Returns staking provider of the given operator.\n    function operatorToStakingProvider(address operator)\n        public\n        view\n        returns (address)\n    {\n        return authorization.operatorToStakingProvider[operator];\n    }\n\n    /// @notice Checks if the operator's authorized stake is in sync with\n    ///         operator's weight in the sortition pool.\n    ///         If the operator is not in the sortition pool and their\n    ///         authorized stake is non-zero, function returns false.\n    function isOperatorUpToDate(address operator) external view returns (bool) {\n        return\n            authorization.isOperatorUpToDate(staking, sortitionPool, operator);\n    }\n\n    /// @notice Returns true if the given operator is in the sortition pool.\n    ///         Otherwise, returns false.\n    function isOperatorInPool(address operator) external view returns (bool) {\n        return sortitionPool.isOperatorInPool(operator);\n    }\n\n    /// @notice Selects a new group of operators. Can only be called when DKG\n    ///         is in progress and the pool is locked.\n    ///         At least one operator has to be registered in the pool,\n    ///         otherwise the function fails reverting the transaction.\n    /// @return IDs of selected group members.\n    function selectGroup() external view returns (uint32[] memory) {\n        return sortitionPool.selectGroup(DKG.groupSize, bytes32(dkg.seed));\n    }\n\n    /// @notice Retrieves dkg parameters that were set in DKG library.\n    function dkgParameters() external view returns (DKG.Parameters memory) {\n        return dkg.parameters;\n    }\n\n    /// @notice Returns authorization-related parameters.\n    /// @dev The minimum authorization is also returned by `minimumAuthorization()`\n    ///      function, as a requirement of `IApplication` interface.\n    /// @return minimumAuthorization The minimum authorization amount required\n    ///         so that operator can participate in the random beacon. This\n    ///         amount is required to execute slashing for providing a malicious\n    ///         DKG result or when a relay entry times out.\n    /// @return authorizationDecreaseDelay Delay in seconds that needs to pass\n    ///         between the time authorization decrease is requested and the\n    ///         time that request gets approved. Protects against free-riders\n    ///         earning rewards and not being active in the network.\n    /// @return authorizationDecreaseChangePeriod Authorization decrease change\n    ///         period in seconds. It is the time, before authorization decrease\n    ///         delay end, during which the pending authorization decrease\n    ///         request can be overwritten.\n    ///         If set to 0, pending authorization decrease request can not be\n    ///         overwritten until the entire `authorizationDecreaseDelay` ends.\n    ///         If set to value equal `authorizationDecreaseDelay`, request can\n    ///         always be overwritten.\n    function authorizationParameters()\n        external\n        view\n        returns (\n            uint96 minimumAuthorization,\n            uint64 authorizationDecreaseDelay,\n            uint64 authorizationDecreaseChangePeriod\n        )\n    {\n        return (\n            authorization.parameters.minimumAuthorization,\n            authorization.parameters.authorizationDecreaseDelay,\n            authorization.parameters.authorizationDecreaseChangePeriod\n        );\n    }\n\n    /// @notice Retrieves reward-related parameters.\n    /// @return maliciousDkgResultNotificationRewardMultiplier Percentage of the\n    ///         staking contract malicious behavior notification reward which\n    ///         will be transferred to the notifier reporting about a malicious\n    ///         DKG result. Notifiers are rewarded from a notifiers treasury\n    ///         pool. For example, if notification reward is 1000 and the value\n    ///         of the multiplier is 5, the notifier will receive:\n    ///         5% of 1000 = 50 per each operator affected.\n    /// @return sortitionPoolRewardsBanDuration Duration of the sortition pool\n    ///         rewards ban imposed on operators who missed their turn for DKG\n    ///         result submission or who failed a heartbeat.\n    function rewardParameters()\n        external\n        view\n        returns (\n            uint256 maliciousDkgResultNotificationRewardMultiplier,\n            uint256 sortitionPoolRewardsBanDuration\n        )\n    {\n        return (\n            _maliciousDkgResultNotificationRewardMultiplier,\n            _sortitionPoolRewardsBanDuration\n        );\n    }\n\n    /// @notice Retrieves slashing-related parameters.\n    /// @return maliciousDkgResultSlashingAmount Slashing amount for submitting\n    ///         a malicious DKG result. Every DKG result submitted can be\n    ///         challenged for the time of `dkg.resultChallengePeriodLength`.\n    ///         If the DKG result submitted is challenged and proven to be\n    ///         malicious, the operator who submitted the malicious result is\n    ///         slashed for `_maliciousDkgResultSlashingAmount`.\n    function slashingParameters()\n        external\n        view\n        returns (uint96 maliciousDkgResultSlashingAmount)\n    {\n        return _maliciousDkgResultSlashingAmount;\n    }\n\n    /// @notice Retrieves gas-related parameters.\n    /// @return dkgResultSubmissionGas Calculated max gas cost for submitting\n    ///         a DKG result. This will be refunded as part of the DKG approval\n    ///         process. It is in the submitter's interest to not skip his\n    ///         priority turn on the approval, otherwise the refund of the DKG\n    ///         submission will be refunded to another group member that will\n    ///         call the DKG approve function.\n    /// @return dkgResultApprovalGasOffset Gas that is meant to balance the DKG\n    ///         result approval's overall cost. It can be updated by the\n    ///         governance based on the current market conditions.\n    /// @return notifyOperatorInactivityGasOffset Gas that is meant to balance\n    ///         the notification of an operator inactivity. It can be updated by\n    ///         the governance based on the current market conditions.\n    /// @return notifySeedTimeoutGasOffset Gas that is meant to balance the\n    ///         notification of a seed for DKG delivery timeout. It can be updated\n    ///         by the governance based on the current market conditions.\n    /// @return notifyDkgTimeoutNegativeGasOffset Gas that is meant to balance\n    ///         the notification of a DKG protocol execution timeout. It can be\n    ///         updated by the governance based on the current market conditions.\n    function gasParameters()\n        external\n        view\n        returns (\n            uint256 dkgResultSubmissionGas,\n            uint256 dkgResultApprovalGasOffset,\n            uint256 notifyOperatorInactivityGasOffset,\n            uint256 notifySeedTimeoutGasOffset,\n            uint256 notifyDkgTimeoutNegativeGasOffset\n        )\n    {\n        return (\n            _dkgResultSubmissionGas,\n            _dkgResultApprovalGasOffset,\n            _notifyOperatorInactivityGasOffset,\n            _notifySeedTimeoutGasOffset,\n            _notifyDkgTimeoutNegativeGasOffset\n        );\n    }\n}\n"
     },
     "@keep-network/random-beacon/contracts/api/IRandomBeacon.sol": {
       "content": "// SPDX-License-Identifier: GPL-3.0-only\n//\n// ▓▓▌ ▓▓ ▐▓▓ ▓▓▓▓▓▓▓▓▓▓▌▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▄\n// ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▌▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓\n//   ▓▓▓▓▓▓    ▓▓▓▓▓▓▓▀    ▐▓▓▓▓▓▓    ▐▓▓▓▓▓   ▓▓▓▓▓▓     ▓▓▓▓▓   ▐▓▓▓▓▓▌   ▐▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▄▄▓▓▓▓▓▓▓▀      ▐▓▓▓▓▓▓▄▄▄▄         ▓▓▓▓▓▓▄▄▄▄         ▐▓▓▓▓▓▌   ▐▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▓▓▓▓▓▓▓▀        ▐▓▓▓▓▓▓▓▓▓▓         ▓▓▓▓▓▓▓▓▓▓         ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓\n//   ▓▓▓▓▓▓▀▀▓▓▓▓▓▓▄       ▐▓▓▓▓▓▓▀▀▀▀         ▓▓▓▓▓▓▀▀▀▀         ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▀\n//   ▓▓▓▓▓▓   ▀▓▓▓▓▓▓▄     ▐▓▓▓▓▓▓     ▓▓▓▓▓   ▓▓▓▓▓▓     ▓▓▓▓▓   ▐▓▓▓▓▓▌\n// ▓▓▓▓▓▓▓▓▓▓ █▓▓▓▓▓▓▓▓▓ ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓  ▓▓▓▓▓▓▓▓▓▓\n// ▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓ ▐▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓ ▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓▓  ▓▓▓▓▓▓▓▓▓▓\n//\n//                           Trust math, not hardware.\n\npragma solidity 0.8.17;\n\nimport \"./IRandomBeaconConsumer.sol\";\n\n/// @title Random Beacon interface\ninterface IRandomBeacon {\n    /// @notice Creates a request to generate a new relay entry. Requires a\n    ///         request fee denominated in T token.\n    /// @param callbackContract Beacon consumer callback contract.\n    function requestRelayEntry(IRandomBeaconConsumer callbackContract) external;\n}\n"
@@ -314,7 +314,7 @@
       "content": "// SPDX-License-Identifier: UNLICENSED\npragma solidity >0.0.0;\nimport '@openzeppelin/contracts/proxy/transparent/TransparentUpgradeableProxy.sol';\n"
     },
     "contracts/integrator/AbstractTBTCDepositor.sol": {
-      "content": "// SPDX-License-Identifier: GPL-3.0-only\n\n// ██████████████     ▐████▌     ██████████████\n// ██████████████     ▐████▌     ██████████████\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n// ██████████████     ▐████▌     ██████████████\n// ██████████████     ▐████▌     ██████████████\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n\npragma solidity ^0.8.0;\n\nimport {BTCUtils} from \"@keep-network/bitcoin-spv-sol/contracts/BTCUtils.sol\";\n\nimport \"./IBridge.sol\";\nimport \"./ITBTCVault.sol\";\n\n/// @title Abstract AbstractTBTCDepositor contract.\n/// @notice This abstract contract is meant to facilitate integration of protocols\n///         aiming to use tBTC as an underlying Bitcoin bridge.\n///\n///         Such an integrator is supposed to:\n///         - Create a child contract inheriting from this abstract contract\n///         - Call the `__AbstractTBTCDepositor_initialize` initializer function\n///         - Use the `_initializeDeposit` and `_finalizeDeposit` as part of their\n///           business logic in order to initialize and finalize deposits.\n///\n/// @dev Example usage:\n///      ```\n///      // Example upgradeable integrator contract.\n///      contract ExampleTBTCIntegrator is AbstractTBTCDepositor, Initializable {\n///          /// @custom:oz-upgrades-unsafe-allow constructor\n///          constructor() {\n///              // Prevents the contract from being initialized again.\n///              _disableInitializers();\n///          }\n///\n///          function initialize(\n///              address _bridge,\n///              address _tbtcVault\n///          ) external initializer {\n///              __AbstractTBTCDepositor_initialize(_bridge, _tbtcVault);\n///          }\n///\n///          function startProcess(\n///              IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n///              IBridgeTypes.DepositRevealInfo calldata reveal\n///          ) external {\n///              // Embed necessary context as extra data.\n///              bytes32 extraData = ...;\n///\n///              uint256 depositKey = _initializeDeposit(\n///                  fundingTx,\n///                  reveal,\n///                  extraData\n///              );\n///\n///              // Use the depositKey to track the process.\n///          }\n///\n///          function finalizeProcess(uint256 depositKey) external {\n///              // Ensure the function cannot be called for the same deposit\n///              // twice.\n///\n///              (\n///                  uint256 initialDepositAmount,\n///                  uint256 tbtcAmount,\n///                  bytes32 extraData\n///              ) = _finalizeDeposit(depositKey);\n///\n///              // Do something with the minted TBTC using context\n///              // embedded in the extraData.\n///          }\n///      }\nabstract contract AbstractTBTCDepositor {\n    using BTCUtils for bytes;\n\n    /// @notice Multiplier to convert satoshi to TBTC token units.\n    uint256 public constant SATOSHI_MULTIPLIER = 10**10;\n\n    /// @notice Bridge contract address.\n    IBridge public bridge;\n    /// @notice TBTCVault contract address.\n    ITBTCVault public tbtcVault;\n\n    // Reserved storage space that allows adding more variables without affecting\n    // the storage layout of the child contracts. The convention from OpenZeppelin\n    // suggests the storage space should add up to 50 slots. If more variables are\n    // added in the upcoming versions one need to reduce the array size accordingly.\n    // See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage_gaps\n    // slither-disable-next-line unused-state\n    uint256[47] private __gap;\n\n    event DepositInitialized(uint256 indexed depositKey, uint32 initializedAt);\n\n    event DepositFinalized(\n        uint256 indexed depositKey,\n        uint256 tbtcAmount,\n        uint32 finalizedAt\n    );\n\n    /// @notice Initializes the contract. MUST BE CALLED from the child\n    ///         contract initializer.\n    // slither-disable-next-line dead-code\n    function __AbstractTBTCDepositor_initialize(\n        address _bridge,\n        address _tbtcVault\n    ) internal {\n        require(\n            address(bridge) == address(0) && address(tbtcVault) == address(0),\n            \"AbstractTBTCDepositor already initialized\"\n        );\n\n        require(_bridge != address(0), \"Bridge address cannot be zero\");\n        require(_tbtcVault != address(0), \"TBTCVault address cannot be zero\");\n\n        bridge = IBridge(_bridge);\n        tbtcVault = ITBTCVault(_tbtcVault);\n    }\n\n    /// @notice Initializes a deposit by revealing it to the Bridge.\n    /// @param fundingTx Bitcoin funding transaction data, see `IBridgeTypes.BitcoinTxInfo`.\n    /// @param reveal Deposit reveal data, see `IBridgeTypes.DepositRevealInfo` struct.\n    /// @param extraData 32-byte deposit extra data.\n    /// @return depositKey Deposit key computed as\n    ///         `keccak256(fundingTxHash | reveal.fundingOutputIndex)`. This\n    ///         key can be used to refer to the deposit in the Bridge and\n    ///         TBTCVault contracts.\n    /// @dev Requirements:\n    ///      - The revealed vault address must match the TBTCVault address,\n    ///      - All requirements from {Bridge#revealDepositWithExtraData}\n    ///        function must be met.\n    /// @dev This function doesn't validate if a deposit has been initialized before,\n    ///      as the Bridge won't allow the same deposit to be revealed twice.\n    // slither-disable-next-line dead-code\n    function _initializeDeposit(\n        IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n        IBridgeTypes.DepositRevealInfo calldata reveal,\n        bytes32 extraData\n    ) internal returns (uint256) {\n        require(reveal.vault == address(tbtcVault), \"Vault address mismatch\");\n\n        uint256 depositKey = _calculateDepositKey(\n            _calculateBitcoinTxHash(fundingTx),\n            reveal.fundingOutputIndex\n        );\n\n        emit DepositInitialized(\n            depositKey,\n            /* solhint-disable-next-line not-rely-on-time */\n            uint32(block.timestamp)\n        );\n\n        // The Bridge does not allow to reveal the same deposit twice and\n        // revealed deposits stay there forever. The transaction will revert\n        // if the deposit has already been revealed so, there is no need to do\n        // an explicit check here.\n        bridge.revealDepositWithExtraData(fundingTx, reveal, extraData);\n\n        return depositKey;\n    }\n\n    /// @notice Finalizes a deposit by calculating the amount of TBTC minted\n    ///         for the deposit\n    /// @param depositKey Deposit key identifying the deposit.\n    /// @return initialDepositAmount Amount of funding transaction deposit. In\n    ///         TBTC token decimals precision.\n    /// @return tbtcAmount Approximate amount of TBTC minted for the deposit. In\n    ///         TBTC token decimals precision.\n    /// @return extraData 32-byte deposit extra data.\n    /// @dev Requirements:\n    ///      - The deposit must be initialized but not finalized\n    ///        (in the context of this contract) yet.\n    ///      - The deposit must be finalized on the Bridge side. That means the\n    ///        deposit must be either swept or optimistically minted.\n    /// @dev THIS FUNCTION DOESN'T VALIDATE IF A DEPOSIT HAS BEEN FINALIZED BEFORE,\n    ///      IT IS A RESPONSIBILITY OF THE IMPLEMENTING CONTRACT TO ENSURE THIS\n    ///      FUNCTION WON'T BE CALLED TWICE FOR THE SAME DEPOSIT.\n    /// @dev IMPORTANT NOTE: The tbtcAmount returned by this function is an\n    ///      approximation. See documentation of the `calculateTbtcAmount`\n    ///      responsible for calculating this value for more details.\n    // slither-disable-next-line dead-code\n    function _finalizeDeposit(uint256 depositKey)\n        internal\n        returns (\n            uint256 initialDepositAmount,\n            uint256 tbtcAmount,\n            bytes32 extraData\n        )\n    {\n        IBridgeTypes.DepositRequest memory deposit = bridge.deposits(\n            depositKey\n        );\n        require(deposit.revealedAt != 0, \"Deposit not initialized\");\n\n        (, uint64 finalizedAt) = tbtcVault.optimisticMintingRequests(\n            depositKey\n        );\n\n        require(\n            deposit.sweptAt != 0 || finalizedAt != 0,\n            \"Deposit not finalized by the bridge\"\n        );\n\n        initialDepositAmount = deposit.amount * SATOSHI_MULTIPLIER;\n\n        tbtcAmount = _calculateTbtcAmount(deposit.amount, deposit.treasuryFee);\n\n        // slither-disable-next-line reentrancy-events\n        emit DepositFinalized(\n            depositKey,\n            tbtcAmount,\n            /* solhint-disable-next-line not-rely-on-time */\n            uint32(block.timestamp)\n        );\n\n        extraData = deposit.extraData;\n    }\n\n    /// @notice Calculates the amount of TBTC minted for the deposit.\n    /// @param depositAmountSat Deposit amount in satoshi (1e8 precision).\n    ///        This is the actual amount deposited by the deposit creator, i.e.\n    ///        the gross amount the Bridge's fees are cut from.\n    /// @param depositTreasuryFeeSat Deposit treasury fee in satoshi (1e8 precision).\n    ///        This is an accurate value of the treasury fee that was actually\n    ///        cut upon minting.\n    /// @return tbtcAmount Approximate amount of TBTC minted for the deposit.\n    /// @dev IMPORTANT NOTE: The tbtcAmount returned by this function may\n    ///      not correspond to the actual amount of TBTC minted for the deposit.\n    ///      Although the treasury fee cut upon minting is known precisely,\n    ///      this is not the case for the optimistic minting fee and the Bitcoin\n    ///      transaction fee. To overcome that problem, this function just takes\n    ///      the current maximum allowed values of both fees, at the moment of deposit\n    ///      finalization. For the great majority of the deposits, such an\n    ///      algorithm will return a tbtcAmount slightly lesser than the\n    ///      actual amount of TBTC minted for the deposit. This will cause\n    ///      some TBTC to be left in the contract and ensure there is enough\n    ///      liquidity to finalize the deposit. However, in some rare cases,\n    ///      where the actual values of those fees change between the deposit\n    ///      minting and finalization, the tbtcAmount returned by this function\n    ///      may be greater than the actual amount of TBTC minted for the deposit.\n    ///      If this happens and the reserve coming from previous deposits\n    ///      leftovers does not provide enough liquidity, the deposit will have\n    ///      to wait for finalization until the reserve is refilled by subsequent\n    ///      deposits or a manual top-up. The integrator is responsible for\n    ///      handling such cases.\n    // slither-disable-next-line dead-code\n    function _calculateTbtcAmount(\n        uint64 depositAmountSat,\n        uint64 depositTreasuryFeeSat\n    ) internal view virtual returns (uint256) {\n        // Both deposit amount and treasury fee are in the 1e8 satoshi precision.\n        // We need to convert them to the 1e18 TBTC precision.\n        uint256 amountSubTreasury = (depositAmountSat - depositTreasuryFeeSat) *\n            SATOSHI_MULTIPLIER;\n\n        uint256 omFeeDivisor = tbtcVault.optimisticMintingFeeDivisor();\n        uint256 omFee = omFeeDivisor > 0\n            ? (amountSubTreasury / omFeeDivisor)\n            : 0;\n\n        // The deposit transaction max fee is in the 1e8 satoshi precision.\n        // We need to convert them to the 1e18 TBTC precision.\n        (, , uint64 depositTxMaxFee, ) = bridge.depositParameters();\n        uint256 txMaxFee = depositTxMaxFee * SATOSHI_MULTIPLIER;\n\n        return amountSubTreasury - omFee - txMaxFee;\n    }\n\n    /// @notice Calculates the deposit key for the given funding transaction\n    ///         hash and funding output index.\n    /// @param fundingTxHash Funding transaction hash.\n    /// @param fundingOutputIndex Funding output index.\n    /// @return depositKey Deposit key computed as\n    ///         `keccak256(fundingTxHash | reveal.fundingOutputIndex)`. This\n    ///         key can be used to refer to the deposit in the Bridge and\n    ///         TBTCVault contracts.\n    // slither-disable-next-line dead-code\n    function _calculateDepositKey(\n        bytes32 fundingTxHash,\n        uint32 fundingOutputIndex\n    ) internal pure returns (uint256) {\n        return\n            uint256(\n                keccak256(abi.encodePacked(fundingTxHash, fundingOutputIndex))\n            );\n    }\n\n    /// @notice Calculates the Bitcoin transaction hash for the given Bitcoin\n    ///         transaction data.\n    /// @param txInfo Bitcoin transaction data, see `IBridgeTypes.BitcoinTxInfo` struct.\n    /// @return txHash Bitcoin transaction hash.\n    // slither-disable-next-line dead-code\n    function _calculateBitcoinTxHash(IBridgeTypes.BitcoinTxInfo calldata txInfo)\n        internal\n        view\n        returns (bytes32)\n    {\n        return\n            abi\n                .encodePacked(\n                    txInfo.version,\n                    txInfo.inputVector,\n                    txInfo.outputVector,\n                    txInfo.locktime\n                )\n                .hash256View();\n    }\n}\n"
+      "content": "// SPDX-License-Identifier: GPL-3.0-only\n\n// ██████████████     ▐████▌     ██████████████\n// ██████████████     ▐████▌     ██████████████\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n// ██████████████     ▐████▌     ██████████████\n// ██████████████     ▐████▌     ██████████████\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n\npragma solidity ^0.8.0;\n\nimport {BTCUtils} from \"@keep-network/bitcoin-spv-sol/contracts/BTCUtils.sol\";\n\nimport \"./IBridge.sol\";\nimport \"./ITBTCVault.sol\";\n\n/// @title Abstract AbstractTBTCDepositor contract.\n/// @notice This abstract contract is meant to facilitate integration of protocols\n///         aiming to use tBTC as an underlying Bitcoin bridge.\n///\n///         Such an integrator is supposed to:\n///         - Create a child contract inheriting from this abstract contract\n///         - Call the `__AbstractTBTCDepositor_initialize` initializer function\n///         - Use the `_initializeDeposit` and `_finalizeDeposit` as part of their\n///           business logic in order to initialize and finalize deposits.\n///\n/// @dev Example usage:\n///      ```\n///      // Example upgradeable integrator contract.\n///      contract ExampleTBTCIntegrator is AbstractTBTCDepositor, Initializable {\n///          /// @custom:oz-upgrades-unsafe-allow constructor\n///          constructor() {\n///              // Prevents the contract from being initialized again.\n///              _disableInitializers();\n///          }\n///\n///          function initialize(\n///              address _bridge,\n///              address _tbtcVault\n///          ) external initializer {\n///              __AbstractTBTCDepositor_initialize(_bridge, _tbtcVault);\n///          }\n///\n///          function startProcess(\n///              IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n///              IBridgeTypes.DepositRevealInfo calldata reveal\n///          ) external {\n///              // Embed necessary context as extra data.\n///              bytes32 extraData = ...;\n///\n///              uint256 depositKey = _initializeDeposit(\n///                  fundingTx,\n///                  reveal,\n///                  extraData\n///              );\n///\n///              // Use the depositKey to track the process.\n///          }\n///\n///          function finalizeProcess(uint256 depositKey) external {\n///              // Ensure the function cannot be called for the same deposit\n///              // twice.\n///\n///              (\n///                  uint256 initialDepositAmount,\n///                  uint256 tbtcAmount,\n///                  bytes32 extraData\n///              ) = _finalizeDeposit(depositKey);\n///\n///              // Do something with the minted TBTC using context\n///              // embedded in the extraData.\n///          }\n///      }\nabstract contract AbstractTBTCDepositor {\n    using BTCUtils for bytes;\n\n    /// @notice Multiplier to convert satoshi to TBTC token units.\n    uint256 public constant SATOSHI_MULTIPLIER = 10**10;\n\n    /// @notice Bridge contract address.\n    IBridge public bridge;\n    /// @notice TBTCVault contract address.\n    ITBTCVault public tbtcVault;\n\n    // Reserved storage space that allows adding more variables without affecting\n    // the storage layout of the child contracts. The convention from OpenZeppelin\n    // suggests the storage space should add up to 50 slots. If more variables are\n    // added in the upcoming versions one need to reduce the array size accordingly.\n    // See https://docs.openzeppelin.com/contracts/4.x/upgradeable#storage_gaps\n    // slither-disable-next-line unused-state\n    uint256[47] private __gap;\n\n    /// @notice Initializes the contract. MUST BE CALLED from the child\n    ///         contract initializer.\n    // slither-disable-next-line dead-code\n    function __AbstractTBTCDepositor_initialize(\n        address _bridge,\n        address _tbtcVault\n    ) internal {\n        require(\n            address(bridge) == address(0) && address(tbtcVault) == address(0),\n            \"AbstractTBTCDepositor already initialized\"\n        );\n\n        require(_bridge != address(0), \"Bridge address cannot be zero\");\n        require(_tbtcVault != address(0), \"TBTCVault address cannot be zero\");\n\n        bridge = IBridge(_bridge);\n        tbtcVault = ITBTCVault(_tbtcVault);\n    }\n\n    /// @notice Initializes a deposit by revealing it to the Bridge.\n    /// @param fundingTx Bitcoin funding transaction data, see `IBridgeTypes.BitcoinTxInfo`.\n    /// @param reveal Deposit reveal data, see `IBridgeTypes.DepositRevealInfo` struct.\n    /// @param extraData 32-byte deposit extra data.\n    /// @return depositKey Deposit key computed as\n    ///         `keccak256(fundingTxHash | reveal.fundingOutputIndex)`. This\n    ///         key can be used to refer to the deposit in the Bridge and\n    ///         TBTCVault contracts.\n    /// @dev Requirements:\n    ///      - The revealed vault address must match the TBTCVault address,\n    ///      - All requirements from {Bridge#revealDepositWithExtraData}\n    ///        function must be met.\n    /// @dev This function doesn't validate if a deposit has been initialized before,\n    ///      as the Bridge won't allow the same deposit to be revealed twice.\n    // slither-disable-next-line dead-code\n    function _initializeDeposit(\n        IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n        IBridgeTypes.DepositRevealInfo calldata reveal,\n        bytes32 extraData\n    ) internal returns (uint256) {\n        require(reveal.vault == address(tbtcVault), \"Vault address mismatch\");\n\n        uint256 depositKey = _calculateDepositKey(\n            _calculateBitcoinTxHash(fundingTx),\n            reveal.fundingOutputIndex\n        );\n\n        // The Bridge does not allow to reveal the same deposit twice and\n        // revealed deposits stay there forever. The transaction will revert\n        // if the deposit has already been revealed so, there is no need to do\n        // an explicit check here.\n        bridge.revealDepositWithExtraData(fundingTx, reveal, extraData);\n\n        return depositKey;\n    }\n\n    /// @notice Finalizes a deposit by calculating the amount of TBTC minted\n    ///         for the deposit.\n    /// @param depositKey Deposit key identifying the deposit.\n    /// @return initialDepositAmount Amount of funding transaction deposit. In\n    ///         TBTC token decimals precision.\n    /// @return tbtcAmount Approximate amount of TBTC minted for the deposit. In\n    ///         TBTC token decimals precision.\n    /// @return extraData 32-byte deposit extra data.\n    /// @dev Requirements:\n    ///      - The deposit must be initialized but not finalized\n    ///        (in the context of this contract) yet.\n    ///      - The deposit must be finalized on the Bridge side. That means the\n    ///        deposit must be either swept or optimistically minted.\n    /// @dev THIS FUNCTION DOESN'T VALIDATE IF A DEPOSIT HAS BEEN FINALIZED BEFORE,\n    ///      IT IS A RESPONSIBILITY OF THE IMPLEMENTING CONTRACT TO ENSURE THIS\n    ///      FUNCTION WON'T BE CALLED TWICE FOR THE SAME DEPOSIT.\n    /// @dev IMPORTANT NOTE: The tbtcAmount returned by this function is an\n    ///      approximation. See documentation of the `calculateTbtcAmount`\n    ///      responsible for calculating this value for more details.\n    // slither-disable-next-line dead-code\n    function _finalizeDeposit(uint256 depositKey)\n        internal\n        returns (\n            uint256 initialDepositAmount,\n            uint256 tbtcAmount,\n            bytes32 extraData\n        )\n    {\n        IBridgeTypes.DepositRequest memory deposit = bridge.deposits(\n            depositKey\n        );\n        require(deposit.revealedAt != 0, \"Deposit not initialized\");\n\n        (, uint64 finalizedAt) = tbtcVault.optimisticMintingRequests(\n            depositKey\n        );\n\n        require(\n            deposit.sweptAt != 0 || finalizedAt != 0,\n            \"Deposit not finalized by the bridge\"\n        );\n\n        initialDepositAmount = deposit.amount * SATOSHI_MULTIPLIER;\n\n        tbtcAmount = _calculateTbtcAmount(deposit.amount, deposit.treasuryFee);\n\n        extraData = deposit.extraData;\n    }\n\n    /// @notice Calculates the amount of TBTC minted for the deposit.\n    /// @param depositAmountSat Deposit amount in satoshi (1e8 precision).\n    ///        This is the actual amount deposited by the deposit creator, i.e.\n    ///        the gross amount the Bridge's fees are cut from.\n    /// @param depositTreasuryFeeSat Deposit treasury fee in satoshi (1e8 precision).\n    ///        This is an accurate value of the treasury fee that was actually\n    ///        cut upon minting.\n    /// @return tbtcAmount Approximate amount of TBTC minted for the deposit.\n    /// @dev IMPORTANT NOTE: The tbtcAmount returned by this function may\n    ///      not correspond to the actual amount of TBTC minted for the deposit.\n    ///      Although the treasury fee cut upon minting is known precisely,\n    ///      this is not the case for the optimistic minting fee and the Bitcoin\n    ///      transaction fee. To overcome that problem, this function just takes\n    ///      the current maximum allowed values of both fees, at the moment of deposit\n    ///      finalization. For the great majority of the deposits, such an\n    ///      algorithm will return a tbtcAmount slightly lesser than the\n    ///      actual amount of TBTC minted for the deposit. This will cause\n    ///      some TBTC to be left in the contract and ensure there is enough\n    ///      liquidity to finalize the deposit. However, in some rare cases,\n    ///      where the actual values of those fees change between the deposit\n    ///      minting and finalization, the tbtcAmount returned by this function\n    ///      may be greater than the actual amount of TBTC minted for the deposit.\n    ///      If this happens and the reserve coming from previous deposits\n    ///      leftovers does not provide enough liquidity, the deposit will have\n    ///      to wait for finalization until the reserve is refilled by subsequent\n    ///      deposits or a manual top-up. The integrator is responsible for\n    ///      handling such cases.\n    // slither-disable-next-line dead-code\n    function _calculateTbtcAmount(\n        uint64 depositAmountSat,\n        uint64 depositTreasuryFeeSat\n    ) internal view virtual returns (uint256) {\n        // Both deposit amount and treasury fee are in the 1e8 satoshi precision.\n        // We need to convert them to the 1e18 TBTC precision.\n        uint256 amountSubTreasury = (depositAmountSat - depositTreasuryFeeSat) *\n            SATOSHI_MULTIPLIER;\n\n        uint256 omFeeDivisor = tbtcVault.optimisticMintingFeeDivisor();\n        uint256 omFee = omFeeDivisor > 0\n            ? (amountSubTreasury / omFeeDivisor)\n            : 0;\n\n        // The deposit transaction max fee is in the 1e8 satoshi precision.\n        // We need to convert them to the 1e18 TBTC precision.\n        (, , uint64 depositTxMaxFee, ) = bridge.depositParameters();\n        uint256 txMaxFee = depositTxMaxFee * SATOSHI_MULTIPLIER;\n\n        return amountSubTreasury - omFee - txMaxFee;\n    }\n\n    /// @notice Calculates the deposit key for the given funding transaction\n    ///         hash and funding output index.\n    /// @param fundingTxHash Funding transaction hash.\n    /// @param fundingOutputIndex Funding output index.\n    /// @return depositKey Deposit key computed as\n    ///         `keccak256(fundingTxHash | reveal.fundingOutputIndex)`. This\n    ///         key can be used to refer to the deposit in the Bridge and\n    ///         TBTCVault contracts.\n    // slither-disable-next-line dead-code\n    function _calculateDepositKey(\n        bytes32 fundingTxHash,\n        uint32 fundingOutputIndex\n    ) internal pure returns (uint256) {\n        return\n            uint256(\n                keccak256(abi.encodePacked(fundingTxHash, fundingOutputIndex))\n            );\n    }\n\n    /// @notice Calculates the Bitcoin transaction hash for the given Bitcoin\n    ///         transaction data.\n    /// @param txInfo Bitcoin transaction data, see `IBridgeTypes.BitcoinTxInfo` struct.\n    /// @return txHash Bitcoin transaction hash.\n    // slither-disable-next-line dead-code\n    function _calculateBitcoinTxHash(IBridgeTypes.BitcoinTxInfo calldata txInfo)\n        internal\n        view\n        returns (bytes32)\n    {\n        return\n            abi\n                .encodePacked(\n                    txInfo.version,\n                    txInfo.inputVector,\n                    txInfo.outputVector,\n                    txInfo.locktime\n                )\n                .hash256View();\n    }\n}\n"
     },
     "contracts/integrator/IBridge.sol": {
       "content": "// SPDX-License-Identifier: GPL-3.0-only\n\n// ██████████████     ▐████▌     ██████████████\n// ██████████████     ▐████▌     ██████████████\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n// ██████████████     ▐████▌     ██████████████\n// ██████████████     ▐████▌     ██████████████\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n//               ▐████▌    ▐████▌\n\npragma solidity ^0.8.0;\n\n/// @notice Namespace which groups all types relevant to the IBridge interface.\n/// @dev This is a mirror of the real types used in the Bridge contract.\n///      This way, the `integrator` subpackage does not need to import\n///      anything from the `bridge` subpackage and explicitly depend on it.\n///      This simplifies the dependency graph for integrators.\nlibrary IBridgeTypes {\n    /// @dev See bridge/BitcoinTx.sol#Info\n    struct BitcoinTxInfo {\n        bytes4 version;\n        bytes inputVector;\n        bytes outputVector;\n        bytes4 locktime;\n    }\n\n    /// @dev See bridge/Deposit.sol#DepositRevealInfo\n    struct DepositRevealInfo {\n        uint32 fundingOutputIndex;\n        bytes8 blindingFactor;\n        bytes20 walletPubKeyHash;\n        bytes20 refundPubKeyHash;\n        bytes4 refundLocktime;\n        address vault;\n    }\n\n    /// @dev See bridge/Deposit.sol#DepositRequest\n    struct DepositRequest {\n        address depositor;\n        uint64 amount;\n        uint32 revealedAt;\n        address vault;\n        uint64 treasuryFee;\n        uint32 sweptAt;\n        bytes32 extraData;\n    }\n}\n\n/// @notice Interface of the Bridge contract.\n/// @dev See bridge/Bridge.sol\ninterface IBridge {\n    /// @dev See {Bridge#revealDepositWithExtraData}\n    function revealDepositWithExtraData(\n        IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n        IBridgeTypes.DepositRevealInfo calldata reveal,\n        bytes32 extraData\n    ) external;\n\n    /// @dev See {Bridge#deposits}\n    function deposits(uint256 depositKey)\n        external\n        view\n        returns (IBridgeTypes.DepositRequest memory);\n\n    /// @dev See {Bridge#depositParameters}\n    function depositParameters()\n        external\n        view\n        returns (\n            uint64 depositDustThreshold,\n            uint64 depositTreasuryFeeDivisor,\n            uint64 depositTxMaxFee,\n            uint32 depositRevealAheadPeriod\n        );\n}\n"
@@ -371,7 +371,7 @@
       "content": "// SPDX-License-Identifier: GPL-3.0-only\n\npragma solidity 0.8.17;\n\nimport \"@openzeppelin/contracts/token/ERC721/ERC721.sol\";\n\ncontract TestERC721 is ERC721 {\n    string public constant NAME = \"Test ERC721 Token\";\n    string public constant SYMBOL = \"TT\";\n\n    constructor() ERC721(NAME, SYMBOL) {}\n\n    function mint(address to, uint256 tokenId) public {\n        _mint(to, tokenId);\n    }\n}\n"
     },
     "contracts/test/TestTBTCDepositor.sol": {
-      "content": "// SPDX-License-Identifier: GPL-3.0-only\n\npragma solidity ^0.8.0;\n\nimport {BTCUtils} from \"@keep-network/bitcoin-spv-sol/contracts/BTCUtils.sol\";\n\nimport \"../integrator/AbstractTBTCDepositor.sol\";\nimport \"../integrator/IBridge.sol\";\nimport \"../integrator/ITBTCVault.sol\";\n\ncontract TestTBTCDepositor is AbstractTBTCDepositor {\n    event InitializeDepositReturned(uint256 depositKey);\n\n    event FinalizeDepositReturned(\n        uint256 initialDepositAmount,\n        uint256 tbtcAmount,\n        bytes32 extraData\n    );\n\n    function initialize(address _bridge, address _tbtcVault) external {\n        __AbstractTBTCDepositor_initialize(_bridge, _tbtcVault);\n    }\n\n    function initializeDepositPublic(\n        IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n        IBridgeTypes.DepositRevealInfo calldata reveal,\n        bytes32 extraData\n    ) external {\n        uint256 depositKey = _initializeDeposit(fundingTx, reveal, extraData);\n        emit InitializeDepositReturned(depositKey);\n    }\n\n    function finalizeDepositPublic(uint256 depositKey) external {\n        (\n            uint256 initialDepositAmount,\n            uint256 tbtcAmount,\n            bytes32 extraData\n        ) = _finalizeDeposit(depositKey);\n        emit FinalizeDepositReturned(\n            initialDepositAmount,\n            tbtcAmount,\n            extraData\n        );\n    }\n\n    function calculateTbtcAmountPublic(\n        uint64 depositAmountSat,\n        uint64 depositTreasuryFeeSat\n    ) external view returns (uint256) {\n        return _calculateTbtcAmount(depositAmountSat, depositTreasuryFeeSat);\n    }\n}\n\ncontract MockBridge is IBridge {\n    using BTCUtils for bytes;\n\n    mapping(uint256 => IBridgeTypes.DepositRequest) internal _deposits;\n\n    uint64 internal _depositTreasuryFeeDivisor = 50; // 1/50 == 100 bps == 2% == 0.02\n    uint64 internal _depositTxMaxFee = 1000; // 1000 satoshi = 0.00001 BTC\n\n    event DepositRevealed(uint256 depositKey);\n\n    function revealDepositWithExtraData(\n        IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n        IBridgeTypes.DepositRevealInfo calldata reveal,\n        bytes32 extraData\n    ) external {\n        bytes32 fundingTxHash = abi\n            .encodePacked(\n                fundingTx.version,\n                fundingTx.inputVector,\n                fundingTx.outputVector,\n                fundingTx.locktime\n            )\n            .hash256View();\n\n        uint256 depositKey = uint256(\n            keccak256(\n                abi.encodePacked(fundingTxHash, reveal.fundingOutputIndex)\n            )\n        );\n\n        require(\n            _deposits[depositKey].revealedAt == 0,\n            \"Deposit already revealed\"\n        );\n\n        bytes memory fundingOutput = fundingTx\n            .outputVector\n            .extractOutputAtIndex(reveal.fundingOutputIndex);\n\n        uint64 fundingOutputAmount = fundingOutput.extractValue();\n\n        IBridgeTypes.DepositRequest memory request;\n\n        request.depositor = msg.sender;\n        request.amount = fundingOutputAmount;\n        /* solhint-disable-next-line not-rely-on-time */\n        request.revealedAt = uint32(block.timestamp);\n        request.vault = reveal.vault;\n        request.treasuryFee = _depositTreasuryFeeDivisor > 0\n            ? fundingOutputAmount / _depositTreasuryFeeDivisor\n            : 0;\n        request.sweptAt = 0;\n        request.extraData = extraData;\n\n        _deposits[depositKey] = request;\n\n        emit DepositRevealed(depositKey);\n    }\n\n    function sweepDeposit(uint256 depositKey) public {\n        require(_deposits[depositKey].revealedAt != 0, \"Deposit not revealed\");\n        require(_deposits[depositKey].sweptAt == 0, \"Deposit already swept\");\n        /* solhint-disable-next-line not-rely-on-time */\n        _deposits[depositKey].sweptAt = uint32(block.timestamp);\n    }\n\n    function deposits(uint256 depositKey)\n        external\n        view\n        returns (IBridgeTypes.DepositRequest memory)\n    {\n        return _deposits[depositKey];\n    }\n\n    function depositParameters()\n        external\n        view\n        returns (\n            uint64 depositDustThreshold,\n            uint64 depositTreasuryFeeDivisor,\n            uint64 depositTxMaxFee,\n            uint32 depositRevealAheadPeriod\n        )\n    {\n        depositDustThreshold = 0;\n        depositTreasuryFeeDivisor = 0;\n        depositTxMaxFee = _depositTxMaxFee;\n        depositRevealAheadPeriod = 0;\n    }\n\n    function setDepositTreasuryFeeDivisor(uint64 value) external {\n        _depositTreasuryFeeDivisor = value;\n    }\n\n    function setDepositTxMaxFee(uint64 value) external {\n        _depositTxMaxFee = value;\n    }\n}\n\ncontract MockTBTCVault is ITBTCVault {\n    struct Request {\n        uint64 requestedAt;\n        uint64 finalizedAt;\n    }\n\n    mapping(uint256 => Request) internal _requests;\n\n    uint32 public optimisticMintingFeeDivisor = 100; // 1%\n\n    function optimisticMintingRequests(uint256 depositKey)\n        external\n        returns (uint64 requestedAt, uint64 finalizedAt)\n    {\n        Request memory request = _requests[depositKey];\n        return (request.requestedAt, request.finalizedAt);\n    }\n\n    function createOptimisticMintingRequest(uint256 depositKey) external {\n        require(\n            _requests[depositKey].requestedAt == 0,\n            \"Request already exists\"\n        );\n        /* solhint-disable-next-line not-rely-on-time */\n        _requests[depositKey].requestedAt = uint64(block.timestamp);\n    }\n\n    function finalizeOptimisticMintingRequest(uint256 depositKey) public {\n        require(\n            _requests[depositKey].requestedAt != 0,\n            \"Request does not exist\"\n        );\n        require(\n            _requests[depositKey].finalizedAt == 0,\n            \"Request already finalized\"\n        );\n        /* solhint-disable-next-line not-rely-on-time */\n        _requests[depositKey].finalizedAt = uint64(block.timestamp);\n    }\n\n    function setOptimisticMintingFeeDivisor(uint32 value) external {\n        optimisticMintingFeeDivisor = value;\n    }\n}\n"
+      "content": "// SPDX-License-Identifier: GPL-3.0-only\n\npragma solidity ^0.8.0;\n\nimport {BTCUtils} from \"@keep-network/bitcoin-spv-sol/contracts/BTCUtils.sol\";\n\nimport \"../integrator/AbstractTBTCDepositor.sol\";\nimport \"../integrator/IBridge.sol\";\nimport \"../integrator/ITBTCVault.sol\";\n\nimport \"@openzeppelin/contracts/token/ERC20/IERC20.sol\";\n\ncontract TestTBTCDepositor is AbstractTBTCDepositor {\n    event InitializeDepositReturned(uint256 depositKey);\n\n    event FinalizeDepositReturned(\n        uint256 initialDepositAmount,\n        uint256 tbtcAmount,\n        bytes32 extraData\n    );\n\n    function initialize(address _bridge, address _tbtcVault) external {\n        __AbstractTBTCDepositor_initialize(_bridge, _tbtcVault);\n    }\n\n    function initializeDepositPublic(\n        IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n        IBridgeTypes.DepositRevealInfo calldata reveal,\n        bytes32 extraData\n    ) external {\n        uint256 depositKey = _initializeDeposit(fundingTx, reveal, extraData);\n        emit InitializeDepositReturned(depositKey);\n    }\n\n    function finalizeDepositPublic(uint256 depositKey) external {\n        (\n            uint256 initialDepositAmount,\n            uint256 tbtcAmount,\n            bytes32 extraData\n        ) = _finalizeDeposit(depositKey);\n        emit FinalizeDepositReturned(\n            initialDepositAmount,\n            tbtcAmount,\n            extraData\n        );\n    }\n\n    function calculateTbtcAmountPublic(\n        uint64 depositAmountSat,\n        uint64 depositTreasuryFeeSat\n    ) external view returns (uint256) {\n        return _calculateTbtcAmount(depositAmountSat, depositTreasuryFeeSat);\n    }\n}\n\ncontract MockBridge is IBridge {\n    using BTCUtils for bytes;\n\n    mapping(uint256 => IBridgeTypes.DepositRequest) internal _deposits;\n\n    uint64 internal _depositTreasuryFeeDivisor = 50; // 1/50 == 100 bps == 2% == 0.02\n    uint64 internal _depositTxMaxFee = 1000; // 1000 satoshi = 0.00001 BTC\n\n    event DepositRevealed(uint256 depositKey);\n\n    function revealDepositWithExtraData(\n        IBridgeTypes.BitcoinTxInfo calldata fundingTx,\n        IBridgeTypes.DepositRevealInfo calldata reveal,\n        bytes32 extraData\n    ) external {\n        bytes32 fundingTxHash = abi\n            .encodePacked(\n                fundingTx.version,\n                fundingTx.inputVector,\n                fundingTx.outputVector,\n                fundingTx.locktime\n            )\n            .hash256View();\n\n        uint256 depositKey = uint256(\n            keccak256(\n                abi.encodePacked(fundingTxHash, reveal.fundingOutputIndex)\n            )\n        );\n\n        require(\n            _deposits[depositKey].revealedAt == 0,\n            \"Deposit already revealed\"\n        );\n\n        bytes memory fundingOutput = fundingTx\n            .outputVector\n            .extractOutputAtIndex(reveal.fundingOutputIndex);\n\n        uint64 fundingOutputAmount = fundingOutput.extractValue();\n\n        IBridgeTypes.DepositRequest memory request;\n\n        request.depositor = msg.sender;\n        request.amount = fundingOutputAmount;\n        /* solhint-disable-next-line not-rely-on-time */\n        request.revealedAt = uint32(block.timestamp);\n        request.vault = reveal.vault;\n        request.treasuryFee = _depositTreasuryFeeDivisor > 0\n            ? fundingOutputAmount / _depositTreasuryFeeDivisor\n            : 0;\n        request.sweptAt = 0;\n        request.extraData = extraData;\n\n        _deposits[depositKey] = request;\n\n        emit DepositRevealed(depositKey);\n    }\n\n    function sweepDeposit(uint256 depositKey) public {\n        require(_deposits[depositKey].revealedAt != 0, \"Deposit not revealed\");\n        require(_deposits[depositKey].sweptAt == 0, \"Deposit already swept\");\n        /* solhint-disable-next-line not-rely-on-time */\n        _deposits[depositKey].sweptAt = uint32(block.timestamp);\n    }\n\n    function deposits(uint256 depositKey)\n        external\n        view\n        returns (IBridgeTypes.DepositRequest memory)\n    {\n        return _deposits[depositKey];\n    }\n\n    function depositParameters()\n        external\n        view\n        returns (\n            uint64 depositDustThreshold,\n            uint64 depositTreasuryFeeDivisor,\n            uint64 depositTxMaxFee,\n            uint32 depositRevealAheadPeriod\n        )\n    {\n        depositDustThreshold = 0;\n        depositTreasuryFeeDivisor = 0;\n        depositTxMaxFee = _depositTxMaxFee;\n        depositRevealAheadPeriod = 0;\n    }\n\n    function setDepositTreasuryFeeDivisor(uint64 value) external {\n        _depositTreasuryFeeDivisor = value;\n    }\n\n    function setDepositTxMaxFee(uint64 value) external {\n        _depositTxMaxFee = value;\n    }\n}\n\ncontract MockTBTCVault is ITBTCVault {\n    struct Request {\n        uint64 requestedAt;\n        uint64 finalizedAt;\n    }\n\n    mapping(uint256 => Request) internal _requests;\n\n    uint32 public optimisticMintingFeeDivisor = 100; // 1%\n\n    function optimisticMintingRequests(uint256 depositKey)\n        external\n        returns (uint64 requestedAt, uint64 finalizedAt)\n    {\n        Request memory request = _requests[depositKey];\n        return (request.requestedAt, request.finalizedAt);\n    }\n\n    /// @dev The function is virtual to allow other projects using this mock\n    ///      for AbtractTBTCDepositor-based contract tests to add any custom\n    ///      logic needed.\n    function createOptimisticMintingRequest(uint256 depositKey) public virtual {\n        require(\n            _requests[depositKey].requestedAt == 0,\n            \"Request already exists\"\n        );\n        /* solhint-disable-next-line not-rely-on-time */\n        _requests[depositKey].requestedAt = uint64(block.timestamp);\n    }\n\n    /// @dev The function is virtual to allow other projects using this mock\n    ///      for AbtractTBTCDepositor-based contract tests to add any custom\n    ///      logic needed.\n    function finalizeOptimisticMintingRequest(uint256 depositKey)\n        public\n        virtual\n    {\n        require(\n            _requests[depositKey].requestedAt != 0,\n            \"Request does not exist\"\n        );\n        require(\n            _requests[depositKey].finalizedAt == 0,\n            \"Request already finalized\"\n        );\n        /* solhint-disable-next-line not-rely-on-time */\n        _requests[depositKey].finalizedAt = uint64(block.timestamp);\n    }\n\n    function setOptimisticMintingFeeDivisor(uint32 value) external {\n        optimisticMintingFeeDivisor = value;\n    }\n}\n"
     },
     "contracts/test/WormholeBridgeStub.sol": {
       "content": "// SPDX-License-Identifier: GPL-3.0-only\n\npragma solidity 0.8.17;\n\nimport \"./TestERC20.sol\";\nimport \"../l2/L2WormholeGateway.sol\";\n\n/// @dev Stub contract used in L2WormholeGateway unit tests.\n///      Stub contract is used instead of a smock because of the token transfer\n///      that needs to happen in completeTransferWithPayload function.\ncontract WormholeBridgeStub is IWormholeTokenBridge {\n    TestERC20 public wormholeToken;\n\n    uint256 public transferAmount;\n    bytes32 public receiverAddress;\n\n    // Two simple events allowing to assert Wormhole bridge functions are\n    // called.\n    event WormholeBridgeStub_completeTransferWithPayload(bytes encodedVm);\n    event WormholeBridgeStub_transferTokens(\n        address token,\n        uint256 amount,\n        uint16 recipientChain,\n        bytes32 recipient,\n        uint256 arbiterFee,\n        uint32 nonce\n    );\n    event WormholeBridgeStub_transferTokensWithPayload(\n        address token,\n        uint256 amount,\n        uint16 recipientChain,\n        bytes32 recipient,\n        uint32 nonce,\n        bytes payload\n    );\n\n    constructor(TestERC20 _wormholeToken) {\n        wormholeToken = _wormholeToken;\n    }\n\n    function completeTransferWithPayload(bytes memory encodedVm)\n        external\n        returns (bytes memory)\n    {\n        emit WormholeBridgeStub_completeTransferWithPayload(encodedVm);\n        wormholeToken.mint(msg.sender, transferAmount);\n\n        // In a real implementation, encodedVm is parsed. To avoid copy-pasting\n        // Wormhole code to this contract and then encoding parmaters in unit\n        // tests, we allow to set the receiver address on the stub contract and\n        // we return it here. The rest of the parameters does not matter.\n        IWormholeTokenBridge.TransferWithPayload memory transfer = IWormholeTokenBridge\n            .TransferWithPayload(\n                1, // payloadID\n                2, // amount\n                0x3000000000000000000000000000000000000000000000000000000000000000, // tokenAddress\n                4, // tokenChain\n                0x5000000000000000000000000000000000000000000000000000000000000000, // to\n                6, // toChain\n                0x7000000000000000000000000000000000000000000000000000000000000000, // fromAddress\n                abi.encode(receiverAddress) // payload\n            );\n\n        return abi.encode(transfer);\n    }\n\n    function transferTokens(\n        address token,\n        uint256 amount,\n        uint16 recipientChain,\n        bytes32 recipient,\n        uint256 arbiterFee,\n        uint32 nonce\n    ) external payable returns (uint64 sequence) {\n        emit WormholeBridgeStub_transferTokens(\n            token,\n            amount,\n            recipientChain,\n            recipient,\n            arbiterFee,\n            nonce\n        );\n        return 777;\n    }\n\n    function transferTokensWithPayload(\n        address token,\n        uint256 amount,\n        uint16 recipientChain,\n        bytes32 recipient,\n        uint32 nonce,\n        bytes memory payload\n    ) external payable returns (uint64 sequence) {\n        emit WormholeBridgeStub_transferTokensWithPayload(\n            token,\n            amount,\n            recipientChain,\n            recipient,\n            nonce,\n            payload\n        );\n        return 888;\n    }\n\n    function parseTransferWithPayload(bytes memory encoded)\n        external\n        pure\n        returns (IWormholeTokenBridge.TransferWithPayload memory transfer)\n    {\n        return abi.decode(encoded, (IWormholeTokenBridge.TransferWithPayload));\n    }\n\n    function setTransferAmount(uint256 _transferAmount) external {\n        transferAmount = _transferAmount;\n    }\n\n    function setReceiverAddress(bytes32 _receiverAddress) external {\n        receiverAddress = _receiverAddress;\n    }\n\n    // Allows to mint Wormhole tBTC for depositWormholeTbtc unit tests.\n    function mintWormholeToken(address to, uint256 amount) external {\n        wormholeToken.mint(to, amount);\n    }\n}\n"

package/build/contracts/GovernanceUtils.sol/GovernanceUtils.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bank/Bank.sol/Bank.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bank/IReceiveBalanceApproval.sol/IReceiveBalanceApproval.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/BitcoinTx.sol/BitcoinTx.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/Bridge.sol/Bridge.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/BridgeGovernanceParameters.sol/BridgeGovernanceParameters.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/BridgeState.sol/BridgeState.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/Deposit.sol/Deposit.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/DepositSweep.sol/DepositSweep.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/EcdsaLib.sol/EcdsaLib.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/Fraud.sol/Fraud.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/Heartbeat.sol/Heartbeat.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/IRelay.sol/IRelay.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/MovingFunds.sol/MovingFunds.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/Redemption.sol/OutboundTx.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }

package/build/contracts/bridge/Redemption.sol/Redemption.dbg.json

@@ -1,4 +1,4 @@
 {
   "_format": "hh-sol-dbg-1",
-  "buildInfo": "../../../build-info/627fafad56b15ce826b42a449bf24d7f.json"
+  "buildInfo": "../../../build-info/4989d4ff26f83522f89c9e95f4735622.json"
 }