-
Notifications
You must be signed in to change notification settings - Fork 1
All issues
Issue creation is restricted in this repository
Issues
is:issue state:open
is:issue state:open
Search results
- Status: Open.#185 In UTEXO-Protocol/enclave-signer;
[I-16] Add a reproducible-build pipeline for PCR measurements
build-infraCI/CD, reproducible builds, PCR0/PCR1 verificationCI/CD, reproducible builds, PCR0/PCR1 verificationexternal-audit-findingTracked finding from the external UTEXO security audit (3rd preliminary report)Tracked finding from the external UTEXO security audit (3rd preliminary report)Status: Open.[I-08] Replace the generic Esplora forwarder with a typed, pinned client
audit: pending-mergeFix written and reviewed, pending mergeFix written and reviewed, pending mergeexternal-audit-findingTracked finding from the external UTEXO security audit (3rd preliminary report)Tracked finding from the external UTEXO security audit (3rd preliminary report)server-hardeningEnclave server — timeouts, concurrency, size caps, vsock boundaryEnclave server — timeouts, concurrency, size caps, vsock boundaryStatus: Open.[I-03] Remove blocking Esplora HTTP from the signing thread
deferredTracked but explicitly deferred — not in current scopeTracked but explicitly deferred — not in current scopeexternal-audit-findingTracked finding from the external UTEXO security audit (3rd preliminary report)Tracked finding from the external UTEXO security audit (3rd preliminary report)server-hardeningEnclave server — timeouts, concurrency, size caps, vsock boundaryEnclave server — timeouts, concurrency, size caps, vsock boundaryStatus: Open.[W-05] Enforce the EVM-lock-record (same-OpId) binding in-enclave
deferredTracked but explicitly deferred — not in current scopeTracked but explicitly deferred — not in current scopeevm-signingSignEvm cross-check path (RGB→EVM direction), incl. gas keySignEvm cross-check path (RGB→EVM direction), incl. gas keyexternal-audit-findingTracked finding from the external UTEXO security audit (3rd preliminary report)Tracked finding from the external UTEXO security audit (3rd preliminary report)warningOxorio: Warning severity findingOxorio: Warning severity findingStatus: Open.[audit] Unfiled final-report Infos: I-01, I-02, I-05, I-06, I-07, I-11, I-13, I-14
external-audit-findingTracked finding from the external UTEXO security audit (3rd preliminary report)Tracked finding from the external UTEXO security audit (3rd preliminary report)Status: Open.signEvm: derive/bind EVM recipient from the RGB payload
criticalHigh funds/security impact — pre-mainnet blockerHigh funds/security impact — pre-mainnet blockerdeferredTracked but explicitly deferred — not in current scopeTracked but explicitly deferred — not in current scopeevm-signingSignEvm cross-check path (RGB→EVM direction), incl. gas keySignEvm cross-check path (RGB→EVM direction), incl. gas keyexternal-audit-findingTracked finding from the external UTEXO security audit (3rd preliminary report)Tracked finding from the external UTEXO security audit (3rd preliminary report)Status: Open.signEvm: bind calldata amount to consignment for pools (Transfer) shape
audit: todoAudit finding not yet fixedAudit finding not yet fixedevm-signingSignEvm cross-check path (RGB→EVM direction), incl. gas keySignEvm cross-check path (RGB→EVM direction), incl. gas keyStatus: Open.