Skip to content

Investigation/bridge upgrade - #530

Open
ethereumdegen wants to merge 11 commits into
developfrom
investigation/bridge-upgrade
Open

ethereumdegen wants to merge 11 commits into
developfrom
investigation/bridge-upgrade

Conversation

@ethereumdegen

Copy link
Copy Markdown
Collaborator

No description provided.

ethereumdegen and others added 11 commits May 12, 2026 08:05
- Upgrade ethers v5 → v6, hardhat-ethers → @nomicfoundation/hardhat-ethers v3
- Replace hardhat-waffle with @nomicfoundation/hardhat-chai-matchers
- Update typechain target to ethers-v6, bump typescript and prettier
- Migrate BigNumber → bigint, ethers.utils.* → ethers.*, Contract → BaseContract
- Add helpers/gnosis-safe.ts and helpers/ledger.ts for Safe transaction proposals
- Add propose-upgrade-facet task for diamondCut via Gnosis Safe + Ledger signing
- Update tsconfig target to ES2020 for BigInt operator support

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Forks mainnet at a post-upgrade block to verify that the else-if → else+require
fix in NFTMainnetBridgingToPolygonFacet correctly reverts when a non-owner calls
bridgeNFTsV1, and that the old buggy facet silently skipped the ownership check.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Queried on-chain Transfer events to identify the 82 unique stakers
whose NFTs were stolen via the bridgeNFTsV1 ownership bypass.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…IDs, recovery task

- Add adminMint, adminBurn, adminBurnBatch (onlyRole ADMIN) to PolyTellerNFT.sol
- Resolve V1->V2 token IDs via convertV1TokenId at pre-attack block and add token_id_v2 column to CSV
- Add query_v2_tokenids.sh script for reproducible V2 ID resolution
- Add recover-stolen-nfts hardhat task: batch burns attacker tokens, mints replacements to victims

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

This branch had an error being deployed

1 failed deployment
testing-keys — 0561f00c Deployed May 29, 2026 by ethereumdegen via Build Project - Mainnet #341
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant