You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
There are many fields in block header (BlockHeader::BlockHeaderV5, as of 5 Oct 2023), which are either not used, or their usecase is unclear. This leads to unclear block validation logic, see https://github.com/near/nearcore-private/issues/38. The good practice is to sign as less data as possible, to minimize vulnerability angles, in cases when malicious actor sends invalid data.
There are many fields in block header (
BlockHeader::BlockHeaderV5
, as of 5 Oct 2023), which are either not used, or their usecase is unclear. This leads to unclear block validation logic, see https://github.com/near/nearcore-private/issues/38. The good practice is to sign as less data as possible, to minimize vulnerability angles, in cases when malicious actor sends invalid data.We can take analysis from #9618 and:
challenges_*
,chunk_tx_root
.block_ordinal
,epoch_sync_data_hash
,prev_validator_proposals
. Document why we need to sign these fields.The text was updated successfully, but these errors were encountered: