mirror of
https://github.com/luxfi/dex.git
synced 2026-09-24 00:26:31 +00:00
zeekayandHanzo Dev
33157d5fed
The signing digest covered the order's economic fields but named no chain, no network, and no deadline, so a signature made for one chain recovered its signer on every chain and never expired. On a permissionless exchange a signed order could be lifted onto another D-Chain, or replayed forever. ChainID, NetworkID and Expiry are packed into SigningHash as the authorization scope, ahead of the economic fields, in the same fixed-width hand-written layout so a future field cannot silently drop out of the signature. The D-Chain tx digest binds the same scope for the same reason: a signature must name the chain it spends on to spend on only one. COORDINATED: this changes the order signing digest, so every signer and every verifier moves together. It is a protocol change, not a lone patch, and the order-authorization layout belongs in an LP alongside the finality-message spec. Co-authored-by: Hanzo Dev <[email protected]>