@layerzerolabs/protocol-stellar-v2 0.2.15 → 0.2.19

package/contracts/workers/dvn/src/multisig.rs

@@ -1,157 +0,0 @@
-//! Multisig functionality for the DVN contract.
-//!
-//! Provides secp256k1-based multisig signature verification using Ethereum-style
-//! 20-byte addresses derived from recovered public keys.
-
-use super::*;
-
-use crate::{
-    errors::DvnError,
-    events::{SignerSet, ThresholdSet},
-    storage::DvnStorage,
-};
-use common_macros::only_owner;
-use soroban_sdk::assert_with_error;
-
-// ============================================================================
-// IMultisig Implementation
-// ============================================================================
-
-#[contract_impl]
-impl IMultisig for LzDVN {
-    /// Adds or removes a signer. Requires multisig approval.
-    #[only_owner]
-    fn set_signer(env: &Env, signer: &BytesN<20>, active: bool) {
-        if active {
-            Self::add_signer(env, signer);
-        } else {
-            Self::remove_signer(env, signer);
-        }
-    }
-
-    /// Updates the signature threshold. Requires multisig approval.
-    #[only_owner]
-    fn set_threshold(env: &Env, threshold: u32) {
-        assert_with_error!(env, threshold > 0, DvnError::ZeroThreshold);
-        assert_with_error!(env, Self::total_signers(env) >= threshold, DvnError::TotalSignersLessThanThreshold);
-
-        DvnStorage::set_threshold(env, &threshold);
-
-        ThresholdSet { threshold }.publish(env);
-    }
-
-    // ================================================================
-    // View Functions
-    // ================================================================
-
-    /// Returns the list of all registered signers.
-    fn get_signers(env: &Env) -> Vec<BytesN<20>> {
-        DvnStorage::signers(env)
-    }
-
-    /// Returns the total number of registered signers.
-    fn total_signers(env: &Env) -> u32 {
-        DvnStorage::signers(env).len()
-    }
-
-    /// Checks if an address is a registered signer.
-    fn is_signer(env: &Env, signer: &BytesN<20>) -> bool {
-        DvnStorage::signers(env).iter().any(|s| &s == signer)
-    }
-
-    /// Returns the current signature threshold.
-    fn threshold(env: &Env) -> u32 {
-        DvnStorage::threshold(env)
-    }
-
-    /// Verifies signatures against the current threshold.
-    fn verify_signatures(env: &Env, hash: &BytesN<32>, signatures: &Vec<BytesN<65>>) {
-        Self::verify_n_signatures(env, hash, signatures, Self::threshold(env));
-    }
-
-    /// Verifies that at least `threshold` valid signatures exist for the given hash.
-    ///
-    /// Signatures must be:
-    /// - From registered signers
-    /// - Sorted by signer address (ascending, no duplicates)
-    fn verify_n_signatures(env: &Env, hash: &BytesN<32>, signatures: &Vec<BytesN<65>>, threshold: u32) {
-        assert_with_error!(env, threshold > 0, DvnError::ZeroThreshold);
-        assert_with_error!(env, signatures.len() >= threshold, DvnError::SignatureError);
-
-        let mut last_signer: Option<BytesN<20>> = None;
-        signatures.iter().for_each(|signature| {
-            let signer = Self::recover_signer(env, hash, &signature);
-
-            // Signers must be strictly increasing (ensures no duplicates)
-            assert_with_error!(env, last_signer.as_ref().is_none_or(|last| &signer > last), DvnError::UnsortedSigners);
-            assert_with_error!(env, Self::is_signer(env, &signer), DvnError::SignerNotFound);
-
-            last_signer = Some(signer);
-        });
-    }
-}
-
-// ============================================================================
-// Internal Functions
-// ============================================================================
-
-impl LzDVN {
-    /// Initializes the multisig with a set of signers and threshold.
-    /// Called during contract construction.
-    pub(super) fn init_multisig(env: &Env, signers: &Vec<BytesN<20>>, threshold: u32) {
-        signers.iter().for_each(|signer| Self::add_signer(env, &signer));
-        Self::set_threshold(env, threshold);
-    }
-
-    /// Adds a new signer to the multisig.
-    ///
-    /// # Errors
-    /// - `InvalidSigner` if the signer is the zero address
-    /// - `SignerAlreadyExists` if the signer is already registered
-    fn add_signer(env: &Env, signer: &BytesN<20>) {
-        let zero_signer = BytesN::from_array(env, &[0u8; 20]);
-        assert_with_error!(env, signer != &zero_signer, DvnError::InvalidSigner);
-
-        let mut signers = Self::get_signers(env);
-        assert_with_error!(env, !signers.iter().any(|s| &s == signer), DvnError::SignerAlreadyExists);
-        signers.push_back(signer.clone());
-        DvnStorage::set_signers(env, &signers);
-
-        SignerSet { signer: signer.clone(), active: true }.publish(env);
-    }
-
-    /// Removes a signer from the multisig.
-    ///
-    /// # Errors
-    /// - `SignerNotFound` if the signer is not registered
-    /// - `TotalSignersLessThanThreshold` if removal would violate threshold constraint
-    fn remove_signer(env: &Env, signer: &BytesN<20>) {
-        let mut signers = Self::get_signers(env);
-        let index = signers.first_index_of(signer);
-        assert_with_error!(env, index.is_some(), DvnError::SignerNotFound);
-
-        signers.remove(index.unwrap());
-
-        // Ensure removal doesn't violate threshold constraint
-        assert_with_error!(env, signers.len() >= Self::threshold(env), DvnError::TotalSignersLessThanThreshold);
-        DvnStorage::set_signers(env, &signers);
-
-        SignerSet { signer: signer.clone(), active: false }.publish(env);
-    }
-
-    /// Recovers the Ethereum-style signer address from a secp256k1 signature.
-    ///
-    /// The signature format is 65 bytes: r (32) + s (32) + v (1).
-    /// Returns the last 20 bytes of keccak256(uncompressed_pubkey[1..65]).
-    fn recover_signer(env: &Env, digest: &BytesN<32>, signature: &BytesN<65>) -> BytesN<20> {
-        let sig_bytes: Bytes = signature.into();
-        let v = sig_bytes.get(64).unwrap();
-        let recovery_id = if (27..=30).contains(&v) { v - 27 } else { v };
-        let sig_rs: BytesN<64> = sig_bytes.slice(0..64).try_into().unwrap();
-
-        let public_key = env.crypto_hazmat().secp256k1_recover(digest, &sig_rs, recovery_id as u32);
-
-        // Derive Ethereum address: keccak256(pubkey[1..65])[12..32]
-        Bytes::from(env.crypto().keccak256(&Bytes::from(public_key).slice(1..65))).slice(12..32).try_into().unwrap()
-    }
-}