@smartledger/bsv 5.5.3 → 6.0.1

package/docs/MODULE_REFERENCE_COMPLETE.md

@@ -55,19 +55,19 @@ Three advanced modules totaling **~2.7MB** of functionality:
 - **Purpose**: Threshold cryptography for secure secret distribution
 - **Use Cases**: Backup keys, multi-party security, key recovery
 - **Features**: Split secrets into N shares, require M to reconstruct
-- **CDN**: `unpkg.com/@smartledger/bsv@5.5.3/bsv-shamir.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@6.0.1/bsv-shamir.min.js`
 
 #### **🌐 Global Digital Attestation Framework - GDAF (1184KB)**  
 - **Purpose**: W3C Verifiable Credentials and decentralized identity
 - **Use Cases**: Identity verification, attestations, zero-knowledge proofs
 - **Features**: DID creation, credential issuance, selective disclosure
-- **CDN**: `unpkg.com/@smartledger/bsv@5.5.3/bsv-gdaf.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@6.0.1/bsv-gdaf.min.js`
 
 #### **⚖️ Legal Token Protocol - LTP (1184KB)**
 - **Purpose**: Legal compliance framework for tokenized assets
 - **Use Cases**: Property rights, obligations, compliant tokenization  
 - **Features**: Legal primitives, compliance checking, attestation anchoring
-- **CDN**: `unpkg.com/@smartledger/bsv@5.5.3/bsv-ltp.min.js`
+- **CDN**: `unpkg.com/@smartledger/bsv@6.0.1/bsv-ltp.min.js`
 
 ### **2. Incorrect File Sizes in Documentation**
 
@@ -81,18 +81,18 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 | Module | Size | Use Case | CDN Link |
 |--------|------|----------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.5.3/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@5.5.3/bsv-smartcontract.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.5.3/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.5.3/bsv-script-helper.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.5.3/bsv-security.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.5.3/bsv-ecies.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.5.3/bsv-message.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.5.3/bsv-mnemonic.min.js` |
-| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@5.5.3/bsv-shamir.min.js` |
-| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@5.5.3/bsv-gdaf.min.js` |
-| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@5.5.3/bsv-ltp.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@6.0.1/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Covenant development | `unpkg.com/@smartledger/bsv@6.0.1/bsv-smartcontract.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@6.0.1/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@6.0.1/bsv-script-helper.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@6.0.1/bsv-security.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@6.0.1/bsv-ecies.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@6.0.1/bsv-message.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@6.0.1/bsv-mnemonic.min.js` |
+| **🆕 bsv-shamir.min.js** | 432KB | **Secret sharing** | `unpkg.com/@smartledger/bsv@6.0.1/bsv-shamir.min.js` |
+| **🆕 bsv-gdaf.min.js** | 1184KB | **Digital attestation** | `unpkg.com/@smartledger/bsv@6.0.1/bsv-gdaf.min.js` |
+| **🆕 bsv-ltp.min.js** | 1184KB | **Legal tokens** | `unpkg.com/@smartledger/bsv@6.0.1/bsv-ltp.min.js` |
 
 ## 🎯 **Updated Usage Examples**
 
@@ -100,22 +100,22 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **1. Basic Development (~963KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-script-helper.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-script-helper.min.js"></script>
 ```
 
 #### **2. Smart Contract Development (~2.7MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-smartcontract.min.js"></script>
 ```
 
 #### **3. 🆕 Legal & Compliance Development (~3.2MB — each bundle re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const legalToken = bsv.createLegalToken({
@@ -132,9 +132,9 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **4. 🆕 Security & Cryptography (~1.4MB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-shamir.min.js"></script>
 <script>
   // Shamir Secret Sharing
   const shares = bsv.splitSecret('my_secret_key', 5, 3); // 5 shares, 3 needed
@@ -146,7 +146,7 @@ Three advanced modules totaling **~2.7MB** of functionality:
 
 #### **5. Everything Bundle (937KB)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.bundle.js"></script>
 <script>
   // Everything available immediately
   const shares = bsv.splitSecret('secret', 5, 3);

package/docs/advanced/UTXO_MANAGER_GUIDE.md

@@ -722,7 +722,7 @@ interface UTXO {
 <html>
 <head>
     <title>UTXO Manager Demo</title>
-    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@5.5.3/bsv.min.js"></script>
+    <script src="https://cdn.jsdelivr.net/npm/@smartledger/bsv@6.0.1/bsv.min.js"></script>
 </head>
 <body>
     <script>

package/docs/getting-started/INSTALLATION.md

@@ -48,7 +48,7 @@ const tx: Transaction = new Transaction();
 #### **Core Library Only (937KB)**
 For basic Bitcoin SV operations:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
 <script>
   const privateKey = new bsv.PrivateKey();
   const address = privateKey.toAddress();
@@ -58,7 +58,7 @@ For basic Bitcoin SV operations:
 #### **Complete Bundle (937KB)**  
 Everything in one file:
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.bundle.js"></script>
 <script>
   // All features available immediately
   const shares = bsv.splitSecret('secret', 5, 3);
@@ -71,9 +71,9 @@ Everything in one file:
 
 #### **Smart Contract Development (~2.7MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-covenant.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-covenant.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-smartcontract.min.js"></script>
 <script>
   const covenant = bsv.SmartContract.createCovenantBuilder()
     .extractField('amount').push(50000).greaterThanOrEqual().build();
@@ -82,9 +82,9 @@ Everything in one file:
 
 #### **Legal & Identity Development (~3.2MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-gdaf.min.js"></script>
 <script>
   // Legal Token Protocol
   const propertyToken = bsv.createPropertyToken({
@@ -98,9 +98,9 @@ Everything in one file:
 
 #### **Security & Cryptography (~1.4MB total — each bundle is self-contained and re-embeds core BSV)**
 ```html
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-security.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-shamir.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-security.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-shamir.min.js"></script>
 <script>
   // Threshold Cryptography
   const shares = bsv.splitSecret('my_secret_key', 5, 3);
@@ -114,18 +114,18 @@ Everything in one file:
 
 | Module | Size | Purpose | CDN Link |
 |--------|------|---------|----------|
-| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js` |
-| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@5.5.3/bsv.bundle.js` |
-| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@5.5.3/bsv-smartcontract.min.js` |
-| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@5.5.3/bsv-ltp.min.js` |
-| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@5.5.3/bsv-gdaf.min.js` |
-| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@5.5.3/bsv-shamir.min.js` |
-| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@5.5.3/bsv-security.min.js` |
-| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@5.5.3/bsv-mnemonic.min.js` |
-| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@5.5.3/bsv-ecies.min.js` |
-| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@5.5.3/bsv-covenant.min.js` |
-| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@5.5.3/bsv-script-helper.min.js` |
-| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@5.5.3/bsv-message.min.js` |
+| **bsv.min.js** | 937KB | Core BSV + SmartContract | `unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js` |
+| **bsv.bundle.js** | 937KB | Everything in one file | `unpkg.com/@smartledger/bsv@6.0.1/bsv.bundle.js` |
+| **bsv-smartcontract.min.js** | 937KB | Complete covenant framework | `unpkg.com/@smartledger/bsv@6.0.1/bsv-smartcontract.min.js` |
+| **bsv-ltp.min.js** | 1184KB | **Legal Token Protocol** | `unpkg.com/@smartledger/bsv@6.0.1/bsv-ltp.min.js` |
+| **bsv-gdaf.min.js** | 1184KB | **Digital Identity & Attestation** | `unpkg.com/@smartledger/bsv@6.0.1/bsv-gdaf.min.js` |
+| **bsv-shamir.min.js** | 432KB | **Threshold Cryptography** | `unpkg.com/@smartledger/bsv@6.0.1/bsv-shamir.min.js` |
+| **bsv-security.min.js** | 26KB | Security enhancements (opt-in helpers — see README › Security) | `unpkg.com/@smartledger/bsv@6.0.1/bsv-security.min.js` |
+| **bsv-mnemonic.min.js** | 681KB | HD wallets | `unpkg.com/@smartledger/bsv@6.0.1/bsv-mnemonic.min.js` |
+| **bsv-ecies.min.js** | 71KB | Encryption | `unpkg.com/@smartledger/bsv@6.0.1/bsv-ecies.min.js` |
+| **bsv-covenant.min.js** | 913KB | Covenant operations | `unpkg.com/@smartledger/bsv@6.0.1/bsv-covenant.min.js` |
+| **bsv-script-helper.min.js** | 26KB | Custom script tools | `unpkg.com/@smartledger/bsv@6.0.1/bsv-script-helper.min.js` |
+| **bsv-message.min.js** | 26KB | Message signing | `unpkg.com/@smartledger/bsv@6.0.1/bsv-message.min.js` |
 
 ## ⚙️ **Development Environment Setup**
 

package/docs/getting-started/QUICK_START.md

@@ -14,10 +14,10 @@ npm install @smartledger/bsv
 ### Browser CDN (Instant)
 ```html
 <!-- Core library (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
 
 <!-- Everything included (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.bundle.js"></script>
 ```
 
 ## 💰 **Your First Transaction (60 seconds)**
@@ -127,19 +127,19 @@ SmartLedger-BSV offers 12 different loading options - use only what you need:
 
 ```html
 <!-- Core BSV only (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
 
 <!-- Smart contracts (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-smartcontract.min.js"></script>
 
 <!-- Legal tokens (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-ltp.min.js"></script>
 
 <!-- Digital identity (1.16MB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-gdaf.min.js"></script>
 
 <!-- Everything (937KB) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.bundle.js"></script>
 ```
 
 ## ⚡ **Key Advantages**

package/docs/migration/FROM_BSV_1_5_6.md

@@ -159,17 +159,17 @@ const recovered = bsv.reconstructSecret([shares[0], shares[2], shares[4]]);
 ### **New Modular Options** 
 ```html
 <!-- Core compatibility (same size as bsv@1.5.6) -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.min.js"></script>
 
 <!-- Add smart contracts when ready -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-smartcontract.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-smartcontract.min.js"></script>
 
 <!-- Add advanced features as needed -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-ltp.min.js"></script>
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv-gdaf.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-ltp.min.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv-gdaf.min.js"></script>
 
 <!-- Everything in one file -->
-<script src="https://unpkg.com/@smartledger/bsv@5.5.3/bsv.bundle.js"></script>
+<script src="https://unpkg.com/@smartledger/bsv@6.0.1/bsv.bundle.js"></script>
 ```
 
 ## 🔍 **Testing Your Migration**

package/index.js

@@ -94,6 +94,7 @@ bsv.Address = require('./lib/address')
 bsv.Block = require('./lib/block')
 bsv.MerkleBlock = require('./lib/block/merkleblock')
 bsv.BlockHeader = require('./lib/block/blockheader')
+bsv.SPV = require('./lib/spv')
 bsv.HDPrivateKey = require('./lib/hdprivatekey.js')
 bsv.HDPublicKey = require('./lib/hdpublickey.js')
 bsv.Networks = require('./lib/networks')
@@ -182,6 +183,9 @@ if (typeof window === 'undefined' && typeof require === 'function') {
   }
 }
 
+// Ordinals (1Sat Ordinals inscriptions + marketplace)
+bsv.Ordinals = require('./lib/ordinals')
+
 // Global Digital Attestation Framework (GDAF)
 bsv.GDAF = require('./lib/gdaf')
 

package/lib/crypto/ecdsa.js

@@ -287,6 +287,10 @@ ECDSA.prototype.toString = function () {
   return JSON.stringify(obj)
 }
 
+// NOTE: verify() returns the ECDSA *instance* (for chaining, e.g.
+// `.sign().verify()`), NOT a boolean. The pass/fail result is on `.verified`.
+// Treating the return value as a boolean is ALWAYS truthy and silently accepts
+// forged signatures — use `.verify().verified` or the `verifyBool()` helper.
 ECDSA.prototype.verify = function () {
   if (!this.sigError()) {
     this.verified = true
@@ -296,6 +300,15 @@ ECDSA.prototype.verify = function () {
   return this
 }
 
+/**
+ * Boolean verification — the safe form. Returns `true` only when the signature
+ * is valid, avoiding the truthy-instance trap of verify().
+ * @returns {Boolean}
+ */
+ECDSA.prototype.verifyBool = function () {
+  return this.verify().verified === true
+}
+
 ECDSA.sign = function (hashbuf, privkey, endian) {
   return ECDSA().set({
     hashbuf: hashbuf,

package/lib/crypto/shamir.js

@@ -21,7 +21,13 @@ function secretsLib () {
     // null. Returning null would otherwise either crash secrets.js validation
     // (`rng(bits).length` → TypeError) or silently corrupt a share coefficient
     // (`parseInt(null, 2)` → NaN). With a CSPRNG a re-draw is astronomically rare.
-    for (;;) {
+    // Bounded rejection sampling. Each all-zero draw has probability 2^-bits
+    // (~1/256 for the default 8-bit field), so a redraw is rare and terminates in
+    // ~1 iteration with a real CSPRNG. The cap converts a broken/stubbed RNG that
+    // returns all-zero forever (e.g. a bundle that mocks crypto to Buffer.alloc)
+    // from an unrecoverable hang into a clear, fail-fast error.
+    var MAX_REDRAWS = 64
+    for (var attempt = 0; attempt < MAX_REDRAWS; attempt++) {
       var bytes = Random.getRandomBuffer(Math.ceil(bits / 8))
       var str = ''
       for (var i = 0; i < bytes.length; i++) {
@@ -30,6 +36,8 @@ function secretsLib () {
       str = str.slice(0, bits)
       if (/1/.test(str)) return str
     }
+    throw new Error('shamir: CSPRNG returned all-zero draws ' + MAX_REDRAWS +
+      ' times in a row — refusing to hang on a degenerate/stubbed random source')
   })
   _secrets = s
   return _secrets
@@ -77,9 +85,13 @@ function Shamir (options) {
  * @param {Number} threshold - Minimum shares needed to reconstruct (>= 2)
  * @param {Number} shares - Total shares to generate (>= threshold, <= 255)
  * @param {Object} [options]
- * @param {Boolean} [options.checksum=true] - embed a truncated SHA-256 of the
+ * @param {Boolean} [options.checksum=false] - embed a truncated SHA-256 of the
  *   secret in each share so combine() can detect a wrong/tampered share set.
- *   Set false to avoid disclosing any hash of the secret.
+ *   OFF BY DEFAULT: the checksum is a hash of the secret present in EVERY share,
+ *   so a single shareholder (below threshold) can brute-force a low-entropy secret
+ *   offline by matching it — defeating the threshold. Enable only for high-entropy
+ *   secrets where tamper-detection outweighs that leak. (splitId already detects
+ *   mixing shares from different splits without disclosing anything about the secret.)
  * @returns {Array} Array of v2 share objects
  */
 Shamir.split = function (secret, threshold, shares, options) {
@@ -104,7 +116,7 @@ Shamir.split = function (secret, threshold, shares, options) {
   var rawShares = secretsLib().share(markedHex, shares, threshold)
 
   var splitId = Random.getRandomBuffer(8).toString('hex')
-  var useChecksum = options.checksum !== false
+  var useChecksum = options.checksum === true
   var checksum = useChecksum
     ? Hash.sha256(secretBuffer).slice(0, 4).toString('hex')
     : null

package/lib/gdaf/did-resolver.js

@@ -278,7 +278,9 @@ DIDResolver.verifyOwnership = function(did, signature, message) {
     ecdsa.pubkey = publicKey
     ecdsa.sig = sig
     
-    return ecdsa.verify()
+    // ECDSA.prototype.verify() returns the instance (always truthy); the boolean
+    // result lives on .verified. Returning the instance would accept ANY signature.
+    return ecdsa.verify().verified === true
   } catch (e) {
     return false
   }

package/lib/gdaf/smartledger-anchor.js

@@ -6,6 +6,7 @@ var Script = bsv.Script
 var PrivateKey = bsv.PrivateKey
 var Address = bsv.Address
 var Hash = bsv.crypto.Hash
+var SPV = bsv.SPV
 var $ = bsv.util.preconditions
 
 /**
@@ -384,30 +385,171 @@ SmartLedgerAnchor.parseAnchorData = function(data) {
 }
 
 /**
- * Verify anchor proof
- * @param {String} txid - Transaction ID
- * @param {String} expectedHash - Expected anchored hash
- * @returns {Promise<Object>} Verification result
+ * Verify an anchor proof against the chain.
+ *
+ * SECURITY: this MUST NOT fabricate a result. An attestation/legal-token system
+ * that reports `verified: true` for an unverified txid silently validates a bogus
+ * anchor — the worst possible failure mode. Real verification requires querying a
+ * trusted BSV source (SPV proof, full node, or block explorer) for the transaction,
+ * confirming it is mined, and checking that one of its OP_RETURN outputs actually
+ * commits to `expectedHash`. There is no built-in chain access here, so the caller
+ * must inject a `chainProvider`; without one we fail closed by throwing rather than
+ * returning a stub.
+ *
+ * @param {String} txid - Transaction ID to verify.
+ * @param {String} expectedHash - Hex hash the anchor is expected to commit to.
+ * @param {Object} [options]
+ * @param {Function} options.chainProvider - async (txid) => {
+ *     confirmations:Number, blockHeight:Number, opReturns:String[] (hex payloads) }
+ *     backed by a trusted BSV source.
+ * @param {Number} [options.minConfirmations=1] - required confirmations.
+ * @returns {Promise<Object>} Verification result with `verified` reflecting the
+ *   real inclusion + commitment check.
  */
-SmartLedgerAnchor.verifyAnchor = async function(txid, expectedHash) {
-  // Note: In production, this would query blockchain APIs
-  // For now, return a mock verification result
-  
+SmartLedgerAnchor.verifyAnchor = async function(txid, expectedHash, options) {
+  options = options || {}
+  if (!txid || !expectedHash) {
+    throw new Error('verifyAnchor requires both txid and expectedHash')
+  }
+
+  // Path A — TRUSTLESS SPV: a Merkle proof + block header proves the tx is mined,
+  // and the raw tx (bound to txid by its hash) proves it commits to expectedHash.
+  // No trust in the data provider: a forged branch cannot hash to a PoW-backed root.
+  // Optionally pass a headerChain (tx's block first, then descendants) to also prove
+  // confirmations under real work.
+  if (options.spvProof && (options.header || options.headerChain) && options.rawTx) {
+    return SmartLedgerAnchor._verifyAnchorSPV(txid, expectedHash, options)
+  }
+
+  // Path B — a caller-injected TRUSTED chain provider (full node / SPV service).
+  if (typeof options.chainProvider !== 'function') {
+    throw new Error(
+      'verifyAnchor needs either a trustless SPV proof — { spvProof: { index, nodes }, ' +
+      'header, rawTx } — or a trusted options.chainProvider(txid) returning ' +
+      '{ confirmations, blockHeight, opReturns }. Refusing to fabricate a result.'
+    )
+  }
+
+  var minConfirmations = options.minConfirmations != null ? options.minConfirmations : 1
+  var chain = await options.chainProvider(txid)
+
+  var confirmations = (chain && chain.confirmations) || 0
+  var opReturns = (chain && chain.opReturns) || []
+  var wanted = String(expectedHash).toLowerCase()
+  // The anchor is valid only if a real OP_RETURN on this mined tx commits to the
+  // expected hash. Match on the hash payload, not on substring of the whole tx.
+  var committed = opReturns.some(function(payload) {
+    return String(payload).toLowerCase().indexOf(wanted) !== -1
+  })
+
+  var verified = confirmations >= minConfirmations && committed
+
   return {
-    verified: true,
+    verified: verified,
     txid: txid,
     hash: expectedHash,
+    committed: committed,
+    confirmations: confirmations,
+    blockHeight: (chain && chain.blockHeight) || null,
     timestamp: new Date().toISOString(),
-    confirmations: 6, // Mock confirmations
-    blockHeight: 800000, // Mock block height
     proof: {
       type: 'blockchain_anchor',
       protocol: 'SMARTLEDGER.ATTEST',
-      network: 'mainnet'
+      network: options.network || 'mainnet'
     }
   }
 }
 
+/**
+ * Trustless SPV anchor verification: prove the anchoring tx is mined AND commits to
+ * expectedHash, using only a Merkle proof, a block header, and the raw tx bytes.
+ * @private
+ */
+SmartLedgerAnchor._verifyAnchorSPV = function(txid, expectedHash, options) {
+  var proof = options.spvProof || {}
+
+  // Optional confirmations proof: a header chain with the tx's block first, then its
+  // descendants. The block containing the tx is the chain anchor.
+  var chainResult = null
+  var inclusionHeader = options.header
+  if (options.headerChain) {
+    chainResult = SPV.verifyHeaderChain(options.headerChain, {
+      requirePow: options.requirePow !== false,
+      trustedHash: options.trustedHash
+    })
+    inclusionHeader = options.headerChain[0]
+  }
+
+  var inclusion = SPV.verifyTxInclusion({
+    txid: txid,
+    index: proof.index,
+    nodes: proof.nodes,
+    header: inclusionHeader,
+    requirePow: options.requirePow !== false
+  })
+
+  // Bind the raw tx to the proven txid (double-SHA256, reversed to display order),
+  // then confirm one of its OP_RETURN outputs commits to expectedHash.
+  var raw = Buffer.isBuffer(options.rawTx) ? options.rawTx : Buffer.from(options.rawTx, 'hex')
+  var computedTxid = Buffer.from(Hash.sha256sha256(raw)).reverse().toString('hex')
+  var txidBound = computedTxid.toLowerCase() === String(txid).toLowerCase()
+  var committed = txidBound && SmartLedgerAnchor._rawTxCommitsTo(raw, expectedHash)
+
+  // Confirmations: number of blocks in the supplied chain (tx's block + descendants).
+  var confirmations = chainResult ? chainResult.count : (options.header ? 1 : 0)
+  var minConfirmations = options.minConfirmations != null ? options.minConfirmations : 1
+  var chainOk = chainResult ? chainResult.valid : true
+  var enoughConfirmations = confirmations >= minConfirmations
+
+  return {
+    verified: inclusion.valid && txidBound && committed && chainOk && enoughConfirmations,
+    chainVerified: inclusion.valid, // a real, PoW-backed inclusion proof passed
+    committed: committed,
+    txidBound: txidBound,
+    powValid: inclusion.powValid,
+    confirmations: confirmations,
+    headerChainValid: chainResult ? chainResult.valid : null,
+    headerChainReason: chainResult ? (chainResult.reason || null) : null,
+    tipHash: chainResult ? chainResult.tipHash : null,
+    txid: txid,
+    hash: expectedHash,
+    blockHash: inclusion.blockHash,
+    merkleRoot: inclusion.merkleRoot,
+    timestamp: new Date().toISOString(),
+    proof: {
+      type: chainResult ? 'spv_merkle_inclusion_with_confirmations' : 'spv_merkle_inclusion',
+      protocol: 'SMARTLEDGER.ATTEST',
+      network: options.network || 'mainnet'
+    }
+  }
+}
+
+/**
+ * True if any OP_RETURN output of the raw tx carries a data push equal to (or
+ * containing) `expectedHash`.
+ * @private
+ */
+SmartLedgerAnchor._rawTxCommitsTo = function(rawTx, expectedHash) {
+  var wanted = String(expectedHash).toLowerCase()
+  var tx
+  try {
+    tx = new Transaction(rawTx)
+  } catch (e) {
+    return false
+  }
+  return tx.outputs.some(function(out) {
+    var script = out.script
+    if (!script || !script.chunks || !script.chunks.length) return false
+    // OP_RETURN (0x6a) or OP_FALSE OP_RETURN (0x00 0x6a) data carrier.
+    var isOpReturn = script.chunks[0].opcodenum === 0x6a ||
+      (script.chunks[0].opcodenum === 0x00 && script.chunks[1] && script.chunks[1].opcodenum === 0x6a)
+    if (!isOpReturn) return false
+    return script.chunks.some(function(chunk) {
+      return chunk.buf && chunk.buf.toString('hex').toLowerCase().indexOf(wanted) !== -1
+    })
+  })
+}
+
 /**
  * Get anchoring cost estimate
  * @param {Number} numHashes - Number of hashes to anchor

package/lib/ltp/anchor.js

@@ -99,11 +99,21 @@ var LTPAnchor = {
   },
   
   /**
-   * Verify token anchor using external transaction data
+   * Verify that CALLER-SUPPLIED transaction data commits to the token.
+   *
+   * ⚠️ This does NOT prove the token is anchored on-chain. It only checks that the
+   * OP_RETURN in the `txData` you pass matches the token's commitment. It performs
+   * NO chain query, NO SPV/inclusion proof, and does NOT confirm `txData` actually
+   * corresponds to `txid` or to a mined transaction. An attacker can fabricate
+   * `txData` with a matching OP_RETURN and get `valid:true`. Treat `valid` as
+   * "commitment matches the supplied data" only; obtain `txData` from a TRUSTED
+   * source and verify inclusion separately (SPV / trusted node) before relying on it.
+   * `chainVerified` is always false here to make that explicit.
+   *
    * @param {Object} token - Token to verify
    * @param {String} txid - Transaction ID from external anchor
-   * @param {Object} txData - Transaction data from blockchain
-   * @returns {Object} Verification result
+   * @param {Object} txData - Transaction data (must come from a trusted source)
+   * @returns {Object} { valid, chainVerified:false, ... }
    */
   verifyTokenAnchor: function(token, txid, txData) {
     $.checkArgument(token && typeof token === 'object', 'Invalid token')
@@ -128,6 +138,9 @@ var LTPAnchor = {
       
       return {
         valid: commitmentValid,
+        // Commitment-match only — NOT an on-chain inclusion proof. The caller must
+        // verify txData came from a trusted source / SPV before trusting this.
+        chainVerified: false,
         txid: txid,
         commitment: expectedCommitment,
         anchorData: opReturnData,