KarpelesLab / libwallet / 28284266104

24%

Build Type

push

github

Committed by MagicalTux

Commit Message

wltswap: make EVM swap MEV protection opt-out; bump outscript to v0.3.34 (security)

MEV protection on EVM swaps is now a host-settable option (default on)
instead of forced. Thread the preference from the request down through the
provider interface:
  - ExecuteRequest.MevProtection *bool (nil = default on; *bool so an omitted
    field is "unset" rather than false)
  - new ExecuteOpts carried into Provider.Execute(..., opts)
  - mevEnabled(opts) resolves the default; okxExecuteEVM passes it to OKX's
    broadcastTransaction. Solana ignores it.
Dart: SwapApi.execute gains `mevProtection`; SwapResult surfaces `orderId`
so the host can poll Crypto/Okx:orderStatus for settlement.

Bump outscript v0.3.29 -> v0.3.34 for upstream security hardening on paths
libwallet uses: Solana transaction decoding, EVM Signature()/ParseTransaction
panic guards, evmabi address encoding, and Bitcoin script/address
bounds/overflow fixes (incl. a HIGH-severity massa base58 fix). Transitively
bumps edwards25519 v1.1.7 -> v1.1.8. Full `go test ./...` green.

Part of the unreleased 0.4.69 (pubspec bump deferred to release after CI green).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Coverage Stats

0 of 19 new or added lines in 2 files covered. (0.0%)

1 existing line in 1 file now uncovered.

4729 of 20071 relevant lines covered (23.56%)

95.31 hits per line