Trail of Bits tBTC v2 AC Extension — security remediation#4126

Open

lrsaturnino wants to merge 23 commits into

feat/psbt-covenant-final-project-prfrom

fix/tob-tbtcacext-remediation

Commits on Jul 1, 2026

fix(tecdsa): TOB-TBTCACEXT-11 — count the third operator's seats in triplet eligibility filter
lrsaturnino
committed
fix(ethereum): TOB-TBTCACEXT-10 — read TxMaxFee from its own field in past redemption events
lrsaturnino
committed

Commits on Jul 10, 2026

fix(tbtc): TOB-TBTCACEXT-5 — guard doneSigners map on every access in signing done check
lrsaturnino
committed
fix(retransmission): TOB-TBTCACEXT-6 — synchronize BackoffStrategy tick counters
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-26 — reject signing-done messages from non-attempt members
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-70 — reject non-canonical high-S signer approval certificates
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-2 — derive P2WSH output script for migration destination
lrsaturnino
committed
fix(covenantsigner): TOB-TBTCACEXT-65 — use a flat jobs directory so jobs persist across restarts
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-87 — deauthorize archived and non-live wallets in covenant signing
lrsaturnino
committed
fix(covenantsigner): TOB-TBTCACEXT-92 — fail production signer startup without approval roots
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-36 — do not archive wallets that are pending DKG approval
lrsaturnino
committed
fix(escrow): TOB-TBTCACEXT-27 — accumulate the withdrawn counter on revoked withdrawals
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-56 — deduplicate DKG results only after handling completes
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-57 — deduplicate wallet closures only after archival
lrsaturnino
committed
fix(tbtc): TOB-TBTCACEXT-72 — deduplicate DKG started events only after handling
lrsaturnino
committed

Commits on Jul 13, 2026

Commits on Jul 16, 2026