forked from paradigmxyz/reth
-
Notifications
You must be signed in to change notification settings - Fork 39
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
added full verification of taiko blocks
- Loading branch information
Showing
10 changed files
with
245 additions
and
65 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,145 @@ | ||
| //! Taiko related functionality for the block executor. | ||
| use reth_primitives::{Block, Header, TransactionSigned, TxKind}; | ||
| use revm_primitives::{alloy_primitives::uint, Address, U256}; | ||
| use std::str::FromStr; | ||
| use lazy_static::lazy_static; | ||
| use anyhow::{bail, Context, Result, ensure, anyhow}; | ||
|
|
||
| #[derive(Clone, Debug, Default)] | ||
| pub struct TaikoData { | ||
| /// header | ||
| pub l1_header: Header, | ||
| /// parent L1 header | ||
| pub parent_header: Header, | ||
| /// L2 contract | ||
| pub l2_contract: Address, | ||
| } | ||
|
|
||
| /// Anchor tx gas limit | ||
| pub const ANCHOR_GAS_LIMIT: u64 = 250_000; | ||
|
|
||
| lazy_static! { | ||
| pub static ref GOLDEN_TOUCH_ACCOUNT: Address = { | ||
| Address::from_str("0x0000777735367b36bC9B61C50022d9D0700dB4Ec") | ||
| .expect("invalid golden touch account") | ||
| }; | ||
| static ref GX1: U256 = | ||
| uint!(0x79BE667EF9DCBBAC55A06295CE870B07029BFCDB2DCE28D959F2815B16F81798_U256); | ||
| static ref N: U256 = | ||
| uint!(0xfffffffffffffffffffffffffffffffebaaedce6af48a03bbfd25e8cd0364141_U256); | ||
| static ref GX1_MUL_PRIVATEKEY: U256 = | ||
| uint!(0x4341adf5a780b4a87939938fd7a032f6e6664c7da553c121d3b4947429639122_U256); | ||
| static ref GX2: U256 = | ||
| uint!(0xc6047f9441ed7d6d3045406e95c07cd85c778e4b8cef3ca7abac09b95c709ee5_U256); | ||
| } | ||
|
|
||
|
|
||
| /// check the anchor signature with fixed K value | ||
| fn check_anchor_signature(anchor: &TransactionSigned) -> Result<()> { | ||
| let sign = anchor.signature(); | ||
| if sign.r == *GX1 { | ||
| return Ok(()); | ||
| } | ||
| let msg_hash = anchor.signature_hash(); | ||
| let msg_hash: U256 = msg_hash.into(); | ||
| if sign.r == *GX2 { | ||
| // when r == GX2 require s == 0 if k == 1 | ||
| // alias: when r == GX2 require N == msg_hash + *GX1_MUL_PRIVATEKEY | ||
| if *N != msg_hash + *GX1_MUL_PRIVATEKEY { | ||
| bail!( | ||
| "r == GX2, but N != msg_hash + *GX1_MUL_PRIVATEKEY, N: {}, msg_hash: {msg_hash}, *GX1_MUL_PRIVATEKEY: {}", | ||
| *N, *GX1_MUL_PRIVATEKEY | ||
| ); | ||
| } | ||
| return Ok(()); | ||
| } | ||
| Err(anyhow!( | ||
| "r != *GX1 && r != GX2, r: {}, *GX1: {}, GX2: {}", | ||
| sign.r, | ||
| *GX1, | ||
| *GX2 | ||
| )) | ||
| } | ||
|
|
||
| use alloy_sol_types::{sol, SolCall}; | ||
|
|
||
| /// Anchor call solidity code | ||
| sol! { | ||
| /// Anchor call | ||
| function anchor( | ||
| bytes32 l1Hash, | ||
| bytes32 l1StateRoot, | ||
| uint64 l1BlockId, | ||
| uint32 parentGasUsed | ||
| ) | ||
| external | ||
| {} | ||
| } | ||
|
|
||
| /// Decode anchor tx data | ||
| pub fn decode_anchor(bytes: &[u8]) -> Result<anchorCall> { | ||
| anchorCall::abi_decode(bytes, true).map_err(|e| anyhow!(e)) | ||
| // .context("Invalid anchor call") | ||
| } | ||
|
|
||
| /// Verifies the anchor tx correctness | ||
| pub fn check_anchor_tx(tx: &TransactionSigned, from: &Address, block: &Block, taiko_data: TaikoData) -> Result<()> { | ||
| let anchor = tx.as_eip1559().context(anyhow!("anchor tx is not an EIP1559 tx"))?; | ||
|
|
||
| // Check the signature | ||
| check_anchor_signature(tx).context(anyhow!("failed to check anchor signature"))?; | ||
|
|
||
| // Extract the `to` address | ||
| let TxKind::Call(to) = anchor.to else { | ||
| panic!("anchor tx not a smart contract call") | ||
| }; | ||
| // Check that it's from the golden touch address | ||
| ensure!( | ||
| *from == *GOLDEN_TOUCH_ACCOUNT, | ||
| "anchor transaction from mismatch" | ||
| ); | ||
| // Check that the L2 contract is being called | ||
| ensure!( | ||
| to == taiko_data.l2_contract, | ||
| "anchor transaction to mismatch" | ||
| ); | ||
| // Tx can't have any ETH attached | ||
| ensure!( | ||
| anchor.value == U256::from(0), | ||
| "anchor transaction value mismatch" | ||
| ); | ||
| // Tx needs to have the expected gas limit | ||
| ensure!( | ||
| anchor.gas_limit == ANCHOR_GAS_LIMIT, | ||
| "anchor transaction gas price mismatch" | ||
| ); | ||
| // Check needs to have the base fee set to the block base fee | ||
| ensure!( | ||
| anchor.max_fee_per_gas == block.header.base_fee_per_gas.unwrap().into(), | ||
| "anchor transaction gas mismatch" | ||
| ); | ||
|
|
||
| // Okay now let's decode the anchor tx to verify the inputs | ||
| let anchor_call = decode_anchor(&anchor.input)?; | ||
| // The L1 blockhash needs to match the expected value | ||
| ensure!( | ||
| anchor_call.l1Hash == taiko_data.l1_header.hash_slow(), | ||
| "L1 hash mismatch" | ||
| ); | ||
| ensure!( | ||
| anchor_call.l1StateRoot == taiko_data.l1_header.state_root, | ||
| "L1 state root mismatch" | ||
| ); | ||
| ensure!( | ||
| anchor_call.l1BlockId == taiko_data.l1_header.number, | ||
| "L1 block number mismatch" | ||
| ); | ||
| // The parent gas used input needs to match the gas used value of the parent block | ||
| ensure!( | ||
| anchor_call.parentGasUsed == taiko_data.parent_header.gas_used as u32, | ||
| "parentGasUsed mismatch" | ||
| ); | ||
|
|
||
| Ok(()) | ||
| } |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.