@lodestar/state-transition 1.46.0-dev.281a8ee194 → 1.46.0-dev.3e8651f2dc

package/lib/util/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/util/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/util/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}

package/lib/util/index.js

@@ -20,6 +20,7 @@ export * from "./gloas.js";
 export * from "./interop.js";
 export * from "./loadState/index.js";
 export * from "./pendingDepositsLookup.js";
+export * from "./preVerifyBuilderDeposits.js";
 export * from "./rootCache.js";
 export * from "./seed.js";
 export * from "./shuffling.js";

package/lib/util/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/util/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/util/index.ts"],"names":[],"mappings":"AAAA,cAAc,iBAAiB,CAAC;AAChC,cAAc,YAAY,CAAC;AAC3B,cAAc,kBAAkB,CAAC;AACjC,cAAc,qBAAqB,CAAC;AACpC,cAAc,cAAc,CAAC;AAC7B,cAAc,mBAAmB,CAAC;AAClC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,8BAA8B,CAAC;AAC7C,cAAc,cAAc,CAAC;AAC7B,cAAc,aAAa,CAAC;AAC5B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,qBAAqB,CAAC;AACpC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,eAAe,CAAC;AAC9B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,sBAAsB,CAAC;AACrC,cAAc,4BAA4B,CAAC;AAC3C,cAAc,+BAA+B,CAAC;AAC9C,cAAc,gBAAgB,CAAC;AAC/B,cAAc,WAAW,CAAC;AAC1B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,oBAAoB,CAAC;AACnC,cAAc,kBAAkB,CAAC;AACjC,cAAc,WAAW,CAAC;AAC1B,cAAc,UAAU,CAAC;AACzB,cAAc,oBAAoB,CAAC;AACnC,cAAc,gBAAgB,CAAC;AAC/B,cAAc,uBAAuB,CAAC"}

package/lib/util/pendingDepositsLookup.d.ts

@@ -1,6 +1,6 @@
 import { BeaconConfig } from "@lodestar/config";
 import { PubkeyHex, electra } from "@lodestar/types";
-import { CachedBeaconStateGloas } from "../types.js";
+import { BuilderDepositSignatureCache } from "../cache/builderDepositSignatureCache.js";
 /**
  * Mutable lookup for the pending-deposit sequence used by builder-routing logic.
  *
@@ -21,20 +21,17 @@ export declare class PendingDepositsLookup {
     /** Build an empty lookup for a sequence that will be populated incrementally. */
     static buildEmpty(): PendingDepositsLookup;
     /**
-     * Build a pubkey -> pending-deposits lookup from `state.pendingDeposits`.
-     * No BLS work is done here; signature verification happens lazily in `hasPendingValidator`.
+     * Append a pending deposit to the represented sequence, keyed by its (precomputed) `pubkeyHex`.
      */
-    static build(state: CachedBeaconStateGloas): PendingDepositsLookup;
-    /**
-     * Append a pending deposit to the represented sequence.
-     * Pass `pubkeyHex` if the caller has already computed it.
-     */
-    add(pendingDeposit: electra.PendingDeposit, pubkeyHex?: PubkeyHex): void;
+    add(pendingDeposit: electra.PendingDeposit, pubkeyHex: PubkeyHex): void;
     /**
      * Returns true if any pending deposit for `pubkeyHex` has a valid BLS deposit signature.
      * Memoizes the result in `validationCache` so repeated checks for the same pubkey
      * within a block only verify deposits that have not already been checked.
+     *
+     * Most of the time it should hit the BuilderDepositSignatureCache so we don't have to validate
+     * signatures here.
      */
-    hasPendingValidator(config: BeaconConfig, pubkeyHex: PubkeyHex): boolean;
+    hasPendingValidator(config: BeaconConfig, pubkeyHex: PubkeyHex, cache: BuilderDepositSignatureCache): boolean;
 }
 //# sourceMappingURL=pendingDepositsLookup.d.ts.map

package/lib/util/pendingDepositsLookup.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"pendingDepositsLookup.d.ts","sourceRoot":"","sources":["../../src/util/pendingDepositsLookup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAC,SAAS,EAAE,OAAO,EAAC,MAAM,iBAAiB,CAAC;AAGnD,OAAO,EAAC,sBAAsB,EAAC,MAAM,aAAa,CAAC;AAOnD;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAFlC,OAAO,eAGH;IAEJ,iFAAiF;IACjF,MAAM,CAAC,UAAU,IAAI,qBAAqB,CAEzC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,KAAK,EAAE,sBAAsB,GAAG,qBAAqB,CAMjE;IAED;;;OAGG;IACH,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,SAAS,CAAC,EAAE,SAAS,GAAG,IAAI,CAQvE;IAED;;;;OAIG;IACH,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,GAAG,OAAO,CAqCvE;CACF"}
+{"version":3,"file":"pendingDepositsLookup.d.ts","sourceRoot":"","sources":["../../src/util/pendingDepositsLookup.ts"],"names":[],"mappings":"AAAA,OAAO,EAAC,YAAY,EAAC,MAAM,kBAAkB,CAAC;AAC9C,OAAO,EAAC,SAAS,EAAE,OAAO,EAAC,MAAM,iBAAiB,CAAC;AAEnD,OAAO,EAAC,4BAA4B,EAAC,MAAM,0CAA0C,CAAC;AAOtF;;;;;;;;;;;;GAYG;AACH,qBAAa,qBAAqB;IAE9B,OAAO,CAAC,QAAQ,CAAC,gBAAgB;IACjC,OAAO,CAAC,QAAQ,CAAC,eAAe;IAFlC,OAAO,eAGH;IAEJ,iFAAiF;IACjF,MAAM,CAAC,UAAU,IAAI,qBAAqB,CAEzC;IAED;;OAEG;IACH,GAAG,CAAC,cAAc,EAAE,OAAO,CAAC,cAAc,EAAE,SAAS,EAAE,SAAS,GAAG,IAAI,CAOtE;IAED;;;;;;;OAOG;IACH,mBAAmB,CAAC,MAAM,EAAE,YAAY,EAAE,SAAS,EAAE,SAAS,EAAE,KAAK,EAAE,4BAA4B,GAAG,OAAO,CAsC5G;CACF"}

package/lib/util/pendingDepositsLookup.js

@@ -1,4 +1,3 @@
-import { toPubkeyHex } from "@lodestar/utils";
 import { isValidDepositSignature } from "../block/processDeposit.js";
 /**
  * Mutable lookup for the pending-deposit sequence used by builder-routing logic.
@@ -25,36 +24,26 @@ export class PendingDepositsLookup {
         return new PendingDepositsLookup(new Map(), new Map());
     }
     /**
-     * Build a pubkey -> pending-deposits lookup from `state.pendingDeposits`.
-     * No BLS work is done here; signature verification happens lazily in `hasPendingValidator`.
-     */
-    static build(state) {
-        const lookup = PendingDepositsLookup.buildEmpty();
-        for (const pendingDeposit of state.pendingDeposits.getAllReadonly()) {
-            lookup.add(pendingDeposit);
-        }
-        return lookup;
-    }
-    /**
-     * Append a pending deposit to the represented sequence.
-     * Pass `pubkeyHex` if the caller has already computed it.
+     * Append a pending deposit to the represented sequence, keyed by its (precomputed) `pubkeyHex`.
      */
     add(pendingDeposit, pubkeyHex) {
-        const key = pubkeyHex ?? toPubkeyHex(pendingDeposit.pubkey);
-        const existing = this.depositsByPubkey.get(key);
+        const existing = this.depositsByPubkey.get(pubkeyHex);
         if (existing) {
             existing.push(pendingDeposit);
         }
         else {
-            this.depositsByPubkey.set(key, [pendingDeposit]);
+            this.depositsByPubkey.set(pubkeyHex, [pendingDeposit]);
         }
     }
     /**
      * Returns true if any pending deposit for `pubkeyHex` has a valid BLS deposit signature.
      * Memoizes the result in `validationCache` so repeated checks for the same pubkey
      * within a block only verify deposits that have not already been checked.
+     *
+     * Most of the time it should hit the BuilderDepositSignatureCache so we don't have to validate
+     * signatures here.
      */
-    hasPendingValidator(config, pubkeyHex) {
+    hasPendingValidator(config, pubkeyHex, cache) {
         const validation = this.validationCache.get(pubkeyHex);
         if (validation?.hasValidSignature === true) {
             return true;
@@ -72,7 +61,9 @@ export class PendingDepositsLookup {
         }
         for (let i = startIndex; i < deposits.length; i++) {
             const deposit = deposits[i];
-            if (isValidDepositSignature(config, deposit.pubkey, deposit.withdrawalCredentials, deposit.amount, deposit.signature)) {
+            const isValid = cache.getSignatureValidity(deposit) ??
+                isValidDepositSignature(config, deposit.pubkey, deposit.withdrawalCredentials, deposit.amount, deposit.signature);
+            if (isValid) {
                 this.validationCache.set(pubkeyHex, { hasValidSignature: true, validatedCount: i + 1 });
                 return true;
             }

package/lib/util/pendingDepositsLookup.js.map

@@ -1 +1 @@
-{"version":3,"file":"pendingDepositsLookup.js","sourceRoot":"","sources":["../../src/util/pendingDepositsLookup.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,WAAW,EAAC,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAC,uBAAuB,EAAC,MAAM,4BAA4B,CAAC;AAQnE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAqB;IAEb,gBAAgB;IAChB,eAAe;IAFlC,YACmB,gBAA0D,EAC1D,eAA0D;gCAD1D,gBAAgB;+BAChB,eAAe;IAC/B,CAAC;IAEJ,iFAAiF;IACjF,MAAM,CAAC,UAAU;QACf,OAAO,IAAI,qBAAqB,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;;OAGG;IACH,MAAM,CAAC,KAAK,CAAC,KAA6B;QACxC,MAAM,MAAM,GAAG,qBAAqB,CAAC,UAAU,EAAE,CAAC;QAClD,KAAK,MAAM,cAAc,IAAI,KAAK,CAAC,eAAe,CAAC,cAAc,EAAE,EAAE,CAAC;YACpE,MAAM,CAAC,GAAG,CAAC,cAAc,CAAC,CAAC;QAC7B,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAED;;;OAGG;IACH,GAAG,CAAC,cAAsC,EAAE,SAAqB;QAC/D,MAAM,GAAG,GAAG,SAAS,IAAI,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,CAAC;QAC5D,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QAChD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,GAAG,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QACnD,CAAC;IACH,CAAC;IAED;;;;OAIG;IACH,mBAAmB,CAAC,MAAoB,EAAE,SAAoB;QAC5D,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,UAAU,EAAE,iBAAiB,KAAK,IAAI,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,kFAAkF;QAClF,2DAA2D;QAC3D,MAAM,UAAU,GAAG,UAAU,EAAE,cAAc,IAAI,CAAC,CAAC;QACnD,IAAI,UAAU,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnC,6DAA6D;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5B,IACE,uBAAuB,CACrB,MAAM,EACN,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,qBAAqB,EAC7B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,CAClB,EACD,CAAC;gBACD,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,EAAC,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,EAAC,CAAC,CAAC;gBACtF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,EAAC,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC;QACjG,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}
+{"version":3,"file":"pendingDepositsLookup.js","sourceRoot":"","sources":["../../src/util/pendingDepositsLookup.ts"],"names":[],"mappings":"AAEA,OAAO,EAAC,uBAAuB,EAAC,MAAM,4BAA4B,CAAC;AAQnE;;;;;;;;;;;;GAYG;AACH,MAAM,OAAO,qBAAqB;IAEb,gBAAgB;IAChB,eAAe;IAFlC,YACmB,gBAA0D,EAC1D,eAA0D;gCAD1D,gBAAgB;+BAChB,eAAe;IAC/B,CAAC;IAEJ,iFAAiF;IACjF,MAAM,CAAC,UAAU;QACf,OAAO,IAAI,qBAAqB,CAAC,IAAI,GAAG,EAAE,EAAE,IAAI,GAAG,EAAE,CAAC,CAAC;IACzD,CAAC;IAED;;OAEG;IACH,GAAG,CAAC,cAAsC,EAAE,SAAoB;QAC9D,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ,EAAE,CAAC;YACb,QAAQ,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;QAChC,CAAC;aAAM,CAAC;YACN,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,EAAE,CAAC,cAAc,CAAC,CAAC,CAAC;QACzD,CAAC;IACH,CAAC;IAED;;;;;;;OAOG;IACH,mBAAmB,CAAC,MAAoB,EAAE,SAAoB,EAAE,KAAmC;QACjG,MAAM,UAAU,GAAG,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACvD,IAAI,UAAU,EAAE,iBAAiB,KAAK,IAAI,EAAE,CAAC;YAC3C,OAAO,IAAI,CAAC;QACd,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;QACtD,IAAI,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC3B,OAAO,KAAK,CAAC;QACf,CAAC;QAED,kFAAkF;QAClF,2DAA2D;QAC3D,MAAM,UAAU,GAAG,UAAU,EAAE,cAAc,IAAI,CAAC,CAAC;QACnD,IAAI,UAAU,KAAK,QAAQ,CAAC,MAAM,EAAE,CAAC;YACnC,6DAA6D;YAC7D,OAAO,KAAK,CAAC;QACf,CAAC;QAED,KAAK,IAAI,CAAC,GAAG,UAAU,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YAClD,MAAM,OAAO,GAAG,QAAQ,CAAC,CAAC,CAAC,CAAC;YAC5B,MAAM,OAAO,GACX,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC;gBACnC,uBAAuB,CACrB,MAAM,EACN,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,qBAAqB,EAC7B,OAAO,CAAC,MAAM,EACd,OAAO,CAAC,SAAS,CAClB,CAAC;YACJ,IAAI,OAAO,EAAE,CAAC;gBACZ,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,EAAC,iBAAiB,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC,GAAG,CAAC,EAAC,CAAC,CAAC;gBACtF,OAAO,IAAI,CAAC;YACd,CAAC;QACH,CAAC;QAED,IAAI,CAAC,eAAe,CAAC,GAAG,CAAC,SAAS,EAAE,EAAC,iBAAiB,EAAE,KAAK,EAAE,cAAc,EAAE,QAAQ,CAAC,MAAM,EAAC,CAAC,CAAC;QACjG,OAAO,KAAK,CAAC;IACf,CAAC;CACF"}

package/lib/util/preVerifyBuilderDeposits.d.ts

@@ -0,0 +1,52 @@
+import { CachedBeaconStateFulu } from "../types.js";
+/** Verify queued deposit signatures in batches of this size. Also the time-box granularity: the
+ *  deadline is checked once per batch, so overrun is bounded to a single batch. Exported for tests. */
+export declare const BUILDER_DEPOSIT_BATCH_SIZE = 32;
+/**
+ * Per-tick cap on builder deposits the prepareForNextSlot scanner will verify.
+ * ~2.7s for 10_000 BLS verifications on a typical server — fits within the slot budget while the
+ * pre-window (see GLOAS_PREVERIFY_WINDOW_EPOCHS) covers up to ~620k deposits over its duration.
+ */
+export declare const MAX_BUILDER_DEPOSITS_PER_SLOT = 10000;
+/**
+ * Number of epochs before GLOAS_FORK_EPOCH during which the prepareForNextSlot scanner pre-verifies
+ * builder-deposit signatures. Two: deposits arriving this late cannot collude with validator
+ * deposits — validator-vs-builder routing is decided at the fork boundary from what is already in
+ * pendingDeposits, so anything submitted inside this window is unambiguous.
+ */
+export declare const GLOAS_PREVERIFY_WINDOW_EPOCHS = 2;
+/**
+ * Summary of a single `preVerifyBuilderDepositsPreGloas` call.
+ */
+export type PreVerifyBuilderDepositsResult = {
+    /** Builder-prefix deposit signatures verified valid in this call (cached true). */
+    validBuilderSignaturesCount: number;
+    /** Builder-prefix deposit signatures verified invalid in this call (cached false, dropped at fork). */
+    invalidBuilderSignaturesCount: number;
+    /** Validator (builder-pubkey) deposit signatures verified valid in this call. */
+    validValidatorSignaturesCount: number;
+    /** Validator (builder-pubkey) deposit signatures verified invalid in this call (abuse signal). */
+    invalidValidatorSignaturesCount: number;
+    /** Pending deposits examined this call (all creds; < pendingDepositsCount ⇒ per-tick cap hit). */
+    scannedPendingDeposits: number;
+    /** Cumulative deposits verified & cached so far this window (cache size, pass + fail). */
+    totalCachedDeposits: number;
+    /** Distinct builder pubkeys tracked so far this window. */
+    totalBuilderPubkeys: number;
+    /** Current `state.pendingDeposits.length` — the full backlog. */
+    pendingDepositsCount: number;
+};
+/**
+ * Scanner driven by `prepareForNextSlot` over the `GLOAS_PREVERIFY_WINDOW_EPOCHS` epochs before
+ * GLOAS_FORK_EPOCH. Walks `state.pendingDeposits` (as struct values via getAllReadonlyValues) and
+ * queues, for signature verification, the deposits the fork transition will check on its hot path:
+ *   - builder-prefix deposits (for onboarding); records each builder pubkey on the cache, and
+ *   - validator deposits sharing a builder pubkey (the set `hasPendingValidator` walks at the fork),
+ *     but only until one is found valid — `hasPendingValidator` stops at the first valid signature, so
+ *     the cache marks the pubkey and the scanner skips that pubkey's remaining validator deposits.
+ *
+ * Bounded by two knobs: at most `maxBuilderDeposits` new deposits are queued per call, and the chunk
+ * verification is **time-boxed** to `maxDurationMs`.
+ */
+export declare function preVerifyBuilderDepositsPreGloas(state: CachedBeaconStateFulu, maxBuilderDeposits: number, maxDurationMs: number): PreVerifyBuilderDepositsResult;
+//# sourceMappingURL=preVerifyBuilderDeposits.d.ts.map

package/lib/util/preVerifyBuilderDeposits.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"preVerifyBuilderDeposits.d.ts","sourceRoot":"","sources":["../../src/util/preVerifyBuilderDeposits.ts"],"names":[],"mappings":"AAGA,OAAO,EAAC,qBAAqB,EAAC,MAAM,aAAa,CAAC;AAGlD;uGACuG;AACvG,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAE7C;;;;GAIG;AACH,eAAO,MAAM,6BAA6B,QAAS,CAAC;AAEpD;;;;;GAKG;AACH,eAAO,MAAM,6BAA6B,IAAI,CAAC;AAE/C;;GAEG;AACH,MAAM,MAAM,8BAA8B,GAAG;IAC3C,mFAAmF;IACnF,2BAA2B,EAAE,MAAM,CAAC;IACpC,uGAAuG;IACvG,6BAA6B,EAAE,MAAM,CAAC;IACtC,iFAAiF;IACjF,6BAA6B,EAAE,MAAM,CAAC;IACtC,kGAAkG;IAClG,+BAA+B,EAAE,MAAM,CAAC;IACxC,kGAAkG;IAClG,sBAAsB,EAAE,MAAM,CAAC;IAC/B,0FAA0F;IAC1F,mBAAmB,EAAE,MAAM,CAAC;IAC5B,2DAA2D;IAC3D,mBAAmB,EAAE,MAAM,CAAC;IAC5B,iEAAiE;IACjE,oBAAoB,EAAE,MAAM,CAAC;CAC9B,CAAC;AAEF;;;;;;;;;;;GAWG;AACH,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,qBAAqB,EAC5B,kBAAkB,EAAE,MAAM,EAC1B,aAAa,EAAE,MAAM,GACpB,8BAA8B,CAyFhC"}

package/lib/util/preVerifyBuilderDeposits.js

@@ -0,0 +1,124 @@
+import { toPubkeyHex } from "@lodestar/utils";
+import { verifyDepositSignatures } from "../block/processDeposit.js";
+import { isBuilderWithdrawalCredential } from "./gloas.js";
+/** Verify queued deposit signatures in batches of this size. Also the time-box granularity: the
+ *  deadline is checked once per batch, so overrun is bounded to a single batch. Exported for tests. */
+export const BUILDER_DEPOSIT_BATCH_SIZE = 32;
+/**
+ * Per-tick cap on builder deposits the prepareForNextSlot scanner will verify.
+ * ~2.7s for 10_000 BLS verifications on a typical server — fits within the slot budget while the
+ * pre-window (see GLOAS_PREVERIFY_WINDOW_EPOCHS) covers up to ~620k deposits over its duration.
+ */
+export const MAX_BUILDER_DEPOSITS_PER_SLOT = 10_000;
+/**
+ * Number of epochs before GLOAS_FORK_EPOCH during which the prepareForNextSlot scanner pre-verifies
+ * builder-deposit signatures. Two: deposits arriving this late cannot collude with validator
+ * deposits — validator-vs-builder routing is decided at the fork boundary from what is already in
+ * pendingDeposits, so anything submitted inside this window is unambiguous.
+ */
+export const GLOAS_PREVERIFY_WINDOW_EPOCHS = 2;
+/**
+ * Scanner driven by `prepareForNextSlot` over the `GLOAS_PREVERIFY_WINDOW_EPOCHS` epochs before
+ * GLOAS_FORK_EPOCH. Walks `state.pendingDeposits` (as struct values via getAllReadonlyValues) and
+ * queues, for signature verification, the deposits the fork transition will check on its hot path:
+ *   - builder-prefix deposits (for onboarding); records each builder pubkey on the cache, and
+ *   - validator deposits sharing a builder pubkey (the set `hasPendingValidator` walks at the fork),
+ *     but only until one is found valid — `hasPendingValidator` stops at the first valid signature, so
+ *     the cache marks the pubkey and the scanner skips that pubkey's remaining validator deposits.
+ *
+ * Bounded by two knobs: at most `maxBuilderDeposits` new deposits are queued per call, and the chunk
+ * verification is **time-boxed** to `maxDurationMs`.
+ */
+export function preVerifyBuilderDepositsPreGloas(state, maxBuilderDeposits, maxDurationMs) {
+    const cache = state.epochCtx.builderDepositSignatureCache;
+    // Collect uncached deposits to verify as struct values. Full rescan each tick: iteration is
+    // O(pendingDeposits) but runs in prepareNextSlot spare time, and isVerified() is an O(1) skip for
+    // already-cached deposits. For a ContainerNodeStructType, getAllReadonlyValues() returns each
+    // node.value by reference — the stable cache key.
+    const queue = [];
+    let scannedPendingDeposits = 0;
+    for (const deposit of state.pendingDeposits.getAllReadonlyValues()) {
+        if (queue.length >= maxBuilderDeposits)
+            break; // per-tick cap; next tick resumes via isVerified()
+        scannedPendingDeposits++;
+        if (cache.isVerified(deposit))
+            continue; // already verified in an earlier tick
+        if (isBuilderWithdrawalCredential(deposit.withdrawalCredentials)) {
+            // Record the builder pubkey so validator deposits sharing it get pre-verified — this or a
+            // later tick, since those validator deposits precede the builder deposit in the queue. A cached
+            // builder deposit already added its pubkey, so it's safe to skip via the `continue` above.
+            cache.addBuilderPubkey(toPubkeyHex(deposit.pubkey));
+            queue.push(deposit);
+        }
+        else {
+            // Validator deposit — pre-verify only if it shares a builder pubkey (the set hasPendingValidator
+            // walks at the fork) AND we haven't already cached a valid validator deposit for that pubkey.
+            // this is the same logic to hasPendingValidator.
+            const pubkeyHex = toPubkeyHex(deposit.pubkey);
+            if (cache.isBuilderPubkey(pubkeyHex) && !cache.hasValidValidatorDeposit(pubkeyHex)) {
+                queue.push(deposit);
+            }
+        }
+    }
+    const pendingDepositsCount = state.pendingDeposits.length;
+    if (queue.length === 0) {
+        return {
+            validBuilderSignaturesCount: 0,
+            invalidBuilderSignaturesCount: 0,
+            validValidatorSignaturesCount: 0,
+            invalidValidatorSignaturesCount: 0,
+            scannedPendingDeposits,
+            totalCachedDeposits: cache.cachedDepositCount,
+            totalBuilderPubkeys: cache.builderPubkeyCount,
+            pendingDepositsCount,
+        };
+    }
+    // Verify in chunks; chunking caps the fallback blast radius so one bad signature only forces 32
+    // individual re-verifications. Key each result by the deposit value object. Counts are tracked
+    // incrementally (not queue.length - verified) so they stay correct when we time-box out early.
+    const deadline = Date.now() + maxDurationMs;
+    let validBuilderSignaturesCount = 0;
+    let invalidBuilderSignaturesCount = 0;
+    let validValidatorSignaturesCount = 0;
+    let invalidValidatorSignaturesCount = 0;
+    for (let chunkStart = 0; chunkStart < queue.length; chunkStart += BUILDER_DEPOSIT_BATCH_SIZE) {
+        const end = Math.min(chunkStart + BUILDER_DEPOSIT_BATCH_SIZE, queue.length);
+        const chunk = queue.slice(chunkStart, end);
+        const chunkResults = verifyDepositSignatures(state.epochCtx.config, chunk);
+        for (let j = 0; j < chunk.length; j++) {
+            cache.setSignatureValidity(chunk[j], chunkResults[j]);
+            const isBuilder = isBuilderWithdrawalCredential(chunk[j].withdrawalCredentials);
+            if (chunkResults[j]) {
+                if (isBuilder) {
+                    validBuilderSignaturesCount++;
+                }
+                else {
+                    validValidatorSignaturesCount++;
+                    // A valid validator deposit satisfies hasPendingValidator() for this pubkey; stop
+                    // pre-verifying its remaining validator deposits on later ticks.
+                    cache.setValidValidatorDeposit(toPubkeyHex(chunk[j].pubkey));
+                }
+            }
+            else if (isBuilder) {
+                invalidBuilderSignaturesCount++;
+            }
+            else {
+                invalidValidatorSignaturesCount++;
+            }
+        }
+        // Time-box: keep everything verified so far (already cached) and stop
+        if (Date.now() >= deadline)
+            break;
+    }
+    return {
+        validBuilderSignaturesCount,
+        invalidBuilderSignaturesCount,
+        validValidatorSignaturesCount,
+        invalidValidatorSignaturesCount,
+        scannedPendingDeposits,
+        totalCachedDeposits: cache.cachedDepositCount,
+        totalBuilderPubkeys: cache.builderPubkeyCount,
+        pendingDepositsCount,
+    };
+}
+//# sourceMappingURL=preVerifyBuilderDeposits.js.map

package/lib/util/preVerifyBuilderDeposits.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"preVerifyBuilderDeposits.js","sourceRoot":"","sources":["../../src/util/preVerifyBuilderDeposits.ts"],"names":[],"mappings":"AACA,OAAO,EAAC,WAAW,EAAC,MAAM,iBAAiB,CAAC;AAC5C,OAAO,EAAC,uBAAuB,EAAC,MAAM,4BAA4B,CAAC;AAEnE,OAAO,EAAC,6BAA6B,EAAC,MAAM,YAAY,CAAC;AAEzD;uGACuG;AACvG,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAE7C;;;;GAIG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAEpD;;;;;GAKG;AACH,MAAM,CAAC,MAAM,6BAA6B,GAAG,CAAC,CAAC;AAwB/C;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gCAAgC,CAC9C,KAA4B,EAC5B,kBAA0B,EAC1B,aAAqB;IAErB,MAAM,KAAK,GAAG,KAAK,CAAC,QAAQ,CAAC,4BAA4B,CAAC;IAE1D,4FAA4F;IAC5F,kGAAkG;IAClG,8FAA8F;IAC9F,kDAAkD;IAClD,MAAM,KAAK,GAA6B,EAAE,CAAC;IAC3C,IAAI,sBAAsB,GAAG,CAAC,CAAC;IAC/B,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,eAAe,CAAC,oBAAoB,EAAE,EAAE,CAAC;QACnE,IAAI,KAAK,CAAC,MAAM,IAAI,kBAAkB;YAAE,MAAM,CAAC,mDAAmD;QAClG,sBAAsB,EAAE,CAAC;QACzB,IAAI,KAAK,CAAC,UAAU,CAAC,OAAO,CAAC;YAAE,SAAS,CAAC,sCAAsC;QAE/E,IAAI,6BAA6B,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC;YACjE,0FAA0F;YAC1F,gGAAgG;YAChG,2FAA2F;YAC3F,KAAK,CAAC,gBAAgB,CAAC,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACtB,CAAC;aAAM,CAAC;YACN,iGAAiG;YACjG,8FAA8F;YAC9F,iDAAiD;YACjD,MAAM,SAAS,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;YAC9C,IAAI,KAAK,CAAC,eAAe,CAAC,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,wBAAwB,CAAC,SAAS,CAAC,EAAE,CAAC;gBACnF,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;YACtB,CAAC;QACH,CAAC;IACH,CAAC;IAED,MAAM,oBAAoB,GAAG,KAAK,CAAC,eAAe,CAAC,MAAM,CAAC;IAC1D,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACvB,OAAO;YACL,2BAA2B,EAAE,CAAC;YAC9B,6BAA6B,EAAE,CAAC;YAChC,6BAA6B,EAAE,CAAC;YAChC,+BAA+B,EAAE,CAAC;YAClC,sBAAsB;YACtB,mBAAmB,EAAE,KAAK,CAAC,kBAAkB;YAC7C,mBAAmB,EAAE,KAAK,CAAC,kBAAkB;YAC7C,oBAAoB;SACrB,CAAC;IACJ,CAAC;IAED,gGAAgG;IAChG,+FAA+F;IAC/F,+FAA+F;IAC/F,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,aAAa,CAAC;IAC5C,IAAI,2BAA2B,GAAG,CAAC,CAAC;IACpC,IAAI,6BAA6B,GAAG,CAAC,CAAC;IACtC,IAAI,6BAA6B,GAAG,CAAC,CAAC;IACtC,IAAI,+BAA+B,GAAG,CAAC,CAAC;IACxC,KAAK,IAAI,UAAU,GAAG,CAAC,EAAE,UAAU,GAAG,KAAK,CAAC,MAAM,EAAE,UAAU,IAAI,0BAA0B,EAAE,CAAC;QAC7F,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,0BAA0B,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;QAC5E,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,UAAU,EAAE,GAAG,CAAC,CAAC;QAC3C,MAAM,YAAY,GAAG,uBAAuB,CAAC,KAAK,CAAC,QAAQ,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC3E,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACtC,KAAK,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC;YACtD,MAAM,SAAS,GAAG,6BAA6B,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,qBAAqB,CAAC,CAAC;YAChF,IAAI,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBACpB,IAAI,SAAS,EAAE,CAAC;oBACd,2BAA2B,EAAE,CAAC;gBAChC,CAAC;qBAAM,CAAC;oBACN,6BAA6B,EAAE,CAAC;oBAChC,kFAAkF;oBAClF,iEAAiE;oBACjE,KAAK,CAAC,wBAAwB,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;gBAC/D,CAAC;YACH,CAAC;iBAAM,IAAI,SAAS,EAAE,CAAC;gBACrB,6BAA6B,EAAE,CAAC;YAClC,CAAC;iBAAM,CAAC;gBACN,+BAA+B,EAAE,CAAC;YACpC,CAAC;QACH,CAAC;QACD,sEAAsE;QACtE,IAAI,IAAI,CAAC,GAAG,EAAE,IAAI,QAAQ;YAAE,MAAM;IACpC,CAAC;IAED,OAAO;QACL,2BAA2B;QAC3B,6BAA6B;QAC7B,6BAA6B;QAC7B,+BAA+B;QAC/B,sBAAsB;QACtB,mBAAmB,EAAE,KAAK,CAAC,kBAAkB;QAC7C,mBAAmB,EAAE,KAAK,CAAC,kBAAkB;QAC7C,oBAAoB;KACrB,CAAC;AACJ,CAAC"}

package/package.json

@@ -11,7 +11,7 @@
   "bugs": {
     "url": "https://github.com/ChainSafe/lodestar/issues"
   },
-  "version": "1.46.0-dev.281a8ee194",
+  "version": "1.46.0-dev.3e8651f2dc",
   "type": "module",
   "exports": {
     ".": {
@@ -71,14 +71,14 @@
     "@chainsafe/pubkey-index-map": "^3.0.0",
     "@chainsafe/ssz": "^1.6.2",
     "@chainsafe/swap-or-not-shuffle": "^1.2.1",
-    "@lodestar/config": "^1.46.0-dev.281a8ee194",
-    "@lodestar/params": "^1.46.0-dev.281a8ee194",
-    "@lodestar/types": "^1.46.0-dev.281a8ee194",
-    "@lodestar/utils": "^1.46.0-dev.281a8ee194",
+    "@lodestar/config": "^1.46.0-dev.3e8651f2dc",
+    "@lodestar/params": "^1.46.0-dev.3e8651f2dc",
+    "@lodestar/types": "^1.46.0-dev.3e8651f2dc",
+    "@lodestar/utils": "^1.46.0-dev.3e8651f2dc",
     "@vekexasia/bigint-buffer2": "^1.1.1"
   },
   "devDependencies": {
-    "@lodestar/api": "^1.46.0-dev.281a8ee194"
+    "@lodestar/api": "^1.46.0-dev.3e8651f2dc"
   },
   "keywords": [
     "ethereum",
@@ -86,5 +86,5 @@
     "beacon",
     "blockchain"
   ],
-  "gitHead": "42b740d77c7f67fc55d08d43c2e216f7856f7463"
+  "gitHead": "efa50dd77363efe05773fa47bcc1e62a06bbbe50"
 }

package/src/block/processDeposit.ts

@@ -1,4 +1,4 @@
-import {PublicKey, Signature, verify} from "@chainsafe/blst";
+import {PublicKey, Signature, verify, verifyMultipleAggregateSignatures} from "@chainsafe/blst";
 import {BeaconConfig} from "@lodestar/config";
 import {
   DEPOSIT_CONTRACT_TREE_DEPTH,
@@ -138,6 +138,10 @@ export function addValidatorToRegistry(
   state.balances.push(amount);
 }
 
+/**
+ * Verify a single deposit signature (proof of possession). See {@link verifyDepositSignatures} for
+ * the batch equivalent — the two MUST stay consistent (same domain, signing root, and checks).
+ */
 export function isValidDepositSignature(
   config: BeaconConfig,
   pubkey: Uint8Array,
@@ -164,3 +168,73 @@ export function isValidDepositSignature(
     return false; // Catch all BLS errors: failed key validation, failed signature validation, invalid signature
   }
 }
+
+/**
+ * Batch equivalent of {@link isValidDepositSignature} — verify many deposit signatures at once.
+ * MUST stay consistent with `isValidDepositSignature`: same fork-agnostic deposit domain, same
+ * `DepositMessage` signing root, same group + infinity checks. Tries a single aggregate verify and,
+ * on failure, falls back to verifying each deposit individually so the valid deposits in a batch
+ * containing an invalid one are still identified. Returns a boolean per input deposit; `slot` is not
+ * part of the signature check.
+ *
+ * Used by the pre-Gloas builder-deposit pre-verify scanner (see `preVerifyBuilderDeposits.ts`).
+ */
+export function verifyDepositSignatures(config: BeaconConfig, deposits: electra.PendingDeposit[]): boolean[] {
+  const results = new Array<boolean>(deposits.length).fill(false);
+  // fork-agnostic domain since deposits are valid across forks, matching isValidDepositSignature
+  const domain = computeDomain(DOMAIN_DEPOSIT, config.GENESIS_FORK_VERSION, ZERO_HASH);
+
+  const signatureSets: {pk: PublicKey; msg: Uint8Array; sig: Signature}[] = [];
+  const signatureSetDepositIndices: number[] = [];
+  for (let i = 0; i < deposits.length; i++) {
+    const {pubkey, withdrawalCredentials, amount, signature} = deposits[i];
+    let pk: PublicKey;
+    let sig: Signature;
+    try {
+      // Parse without group/infinity checks; deferred to the verify call below so it can be
+      // batched across all sets.
+      pk = PublicKey.fromBytes(pubkey);
+      sig = Signature.fromBytes(signature);
+    } catch (_) {
+      // Malformed pubkey or signature bytes - invalid deposit, results[i] stays false
+      continue;
+    }
+    const msg = computeSigningRoot(ssz.phase0.DepositMessage, {pubkey, withdrawalCredentials, amount}, domain);
+    signatureSets.push({pk, msg, sig});
+    signatureSetDepositIndices.push(i);
+  }
+
+  if (signatureSets.length === 0) {
+    return results;
+  }
+
+  // Deposit pubkeys and signatures are untrusted, so group + infinity checks are required.
+  // The trailing (true, true) args delegate those checks to blst, amortized across the batch.
+  let batchValid: boolean;
+  try {
+    batchValid =
+      signatureSets.length >= 2
+        ? verifyMultipleAggregateSignatures(signatureSets, true, true)
+        : verify(signatureSets[0].msg, signatureSets[0].pk, signatureSets[0].sig, true, true);
+  } catch (_) {
+    batchValid = false;
+  }
+
+  if (batchValid) {
+    for (const depositIndex of signatureSetDepositIndices) {
+      results[depositIndex] = true;
+    }
+  } else {
+    for (let s = 0; s < signatureSets.length; s++) {
+      try {
+        if (verify(signatureSets[s].msg, signatureSets[s].pk, signatureSets[s].sig, true, true)) {
+          results[signatureSetDepositIndices[s]] = true;
+        }
+      } catch (_) {
+        // invalid point / malformed → invalid signature, results[i] stays false
+      }
+    }
+  }
+
+  return results;
+}

package/src/cache/builderDepositSignatureCache.ts

@@ -0,0 +1,81 @@
+import {PubkeyHex, electra} from "@lodestar/types";
+
+/**
+ * Caches deposit signature-verification results — passes (`true`) and failures (`false`) — so the
+ * Fulu → Gloas fork transition can skip the bulk verification cost AND skip re-verifying deposits
+ * already proven invalid. Covers both builder-prefix deposits (onboarding) and validator deposits
+ * that share a pubkey with a builder deposit (the ones `hasPendingValidator` checks at the fork).
+ *
+ * Keyed by the deposit's struct **value object** — `electra.PendingDeposit` is a
+ * `ContainerNodeStructType`, so its `node.value` is a stable object reused across
+ * prepareNextSlot-derived states and carried by reference through the gloas pendingDeposits
+ * migration. No merkle-root computation, no slot bucketing.
+ *
+ * Also tracks builder pubkeys seen so the scanner knows which validator deposits to pre-verify (only
+ * those sharing a pubkey with a builder deposit ever reach `hasPendingValidator`). The mapped boolean
+ * records whether a *valid* validator deposit for that pubkey has been found: once true, the scanner
+ * stops pre-verifying further validator deposits for it — `hasPendingValidator` short-circuits on the
+ * first valid signature at the fork, so the rest would never be read.
+ *
+ * Lifecycle owned by `prepareNextSlot`: filled during the pre-fork window, then `clear()`ed once the
+ * Gloas fork is finalized. `onboardBuildersFromPendingDeposits()` only reads it. A plain `Map` (not a
+ * `WeakMap`) is used so the drop is deterministic and the contents are inspectable for logging.
+ *
+ * Single instance across the application (created in `EpochCache.createFromState`, shared
+ * by-reference through `clone()`).
+ */
+export class BuilderDepositSignatureCache {
+  private validityByDeposit = new Map<electra.PendingDeposit, boolean>();
+  /** builder pubkey → whether a valid validator deposit sharing it has already been pre-verified. */
+  private builderPubkeys = new Map<PubkeyHex, boolean>();
+
+  setSignatureValidity(deposit: electra.PendingDeposit, isValid: boolean): void {
+    this.validityByDeposit.set(deposit, isValid);
+  }
+
+  getSignatureValidity(deposit: electra.PendingDeposit): boolean | null {
+    return this.validityByDeposit.get(deposit) ?? null;
+  }
+
+  isVerified(deposit: electra.PendingDeposit): boolean {
+    return this.validityByDeposit.has(deposit);
+  }
+
+  /** Record a builder deposit's pubkey so the scanner pre-verifies validator deposits for it.
+   *  Idempotent; never downgrades a pubkey already marked as having a valid validator deposit. */
+  addBuilderPubkey(pubkeyHex: PubkeyHex): void {
+    if (!this.builderPubkeys.has(pubkeyHex)) {
+      this.builderPubkeys.set(pubkeyHex, false);
+    }
+  }
+
+  isBuilderPubkey(pubkeyHex: PubkeyHex): boolean {
+    return this.builderPubkeys.has(pubkeyHex);
+  }
+
+  /** True once a valid validator deposit sharing this builder pubkey has been pre-verified — the
+   *  scanner then skips this pubkey's remaining validator deposits (as `hasPendingValidator` would). */
+  hasValidValidatorDeposit(pubkeyHex: PubkeyHex): boolean {
+    return this.builderPubkeys.get(pubkeyHex) === true;
+  }
+
+  /** Mark that a valid validator deposit sharing this builder pubkey was found. */
+  setValidValidatorDeposit(pubkeyHex: PubkeyHex): void {
+    this.builderPubkeys.set(pubkeyHex, true);
+  }
+
+  /** Cumulative deposits verified & cached this window (pass + fail). */
+  get cachedDepositCount(): number {
+    return this.validityByDeposit.size;
+  }
+
+  /** Distinct builder pubkeys tracked this window. */
+  get builderPubkeyCount(): number {
+    return this.builderPubkeys.size;
+  }
+
+  clear(): void {
+    this.validityByDeposit.clear();
+    this.builderPubkeys.clear();
+  }
+}

package/src/cache/epochCache.ts

@@ -53,6 +53,7 @@ import {
 } from "../util/shuffling.js";
 import {computeBaseRewardPerIncrement, computeSyncParticipantReward} from "../util/syncCommittee.js";
 import {sumTargetUnslashedBalanceIncrements} from "../util/targetUnslashedBalance.js";
+import {BuilderDepositSignatureCache} from "./builderDepositSignatureCache.js";
 import {EffectiveBalanceIncrements, getEffectiveBalanceIncrementsWithLen} from "./effectiveBalanceIncrements.js";
 import {EpochTransitionCache} from "./epochTransitionCache.js";
 import {PubkeyCache, createPubkeyCache, syncPubkeys} from "./pubkeyCache.js";
@@ -112,6 +113,13 @@ export class EpochCache {
    * Couples both index→pubkey and pubkey→index lookups, keeping them in sync atomically.
    */
   pubkeyCache: PubkeyCache;
+  /**
+   * Shared across all clones of the same chain head. Holds builder deposit signature validity
+   * pre-verified by the prepareForNextSlot scheduler in the `GLOAS_PREVERIFY_WINDOW_EPOCHS` epochs
+   * leading up to GLOAS_FORK_EPOCH, so `onboardBuildersFromPendingDeposits()` at the fork transition
+   * can skip the bulk verification cost. There should only exist one for the entire application.
+   */
+  builderDepositSignatureCache: BuilderDepositSignatureCache;
   /**
    * Indexes of the block proposers for the current epoch.
    * For pre-fulu, this is computed and cached from the current shuffling.
@@ -245,6 +253,7 @@ export class EpochCache {
   constructor(data: {
     config: BeaconConfig;
     pubkeyCache: PubkeyCache;
+    builderDepositSignatureCache: BuilderDepositSignatureCache;
     proposers: number[];
     proposersPrevEpoch: number[] | null;
     proposersNextEpoch: ProposersDeferred;
@@ -277,6 +286,7 @@ export class EpochCache {
   }) {
     this.config = data.config;
     this.pubkeyCache = data.pubkeyCache;
+    this.builderDepositSignatureCache = data.builderDepositSignatureCache;
     this.proposers = data.proposers;
     this.proposersPrevEpoch = data.proposersPrevEpoch;
     this.proposersNextEpoch = data.proposersNextEpoch;
@@ -514,6 +524,8 @@ export class EpochCache {
     return new EpochCache({
       config,
       pubkeyCache,
+      // Created once per application (shared by-reference through clone()).
+      builderDepositSignatureCache: new BuilderDepositSignatureCache(),
       proposers,
       // On first epoch, set to null to prevent unnecessary work since this is only used for metrics
       proposersPrevEpoch: null,
@@ -558,6 +570,8 @@ export class EpochCache {
       config: this.config,
       // Common append-only structures shared with all states, no need to clone
       pubkeyCache: this.pubkeyCache,
+      // Singleton per application, shared by-reference across clones
+      builderDepositSignatureCache: this.builderDepositSignatureCache,
       // Immutable data
       proposers: this.proposers,
       proposersPrevEpoch: this.proposersPrevEpoch,