Skip to content

Restrict distviarex to TEDP account - #60

Merged
TheJudii merged 1 commit into
mainfrom
hotfix/distviarex-main-sync
Jun 3, 2026
Merged

TheJudii merged 1 commit into
mainfrom
hotfix/distviarex-main-sync

Conversation

@TheJudii

@TheJudii TheJudii commented Jun 1, 2026 •

Copy link
Copy Markdown
Contributor

Summary

Adds the deployed distviarex hotfix on top of the now-updated main branch.

distviarex(from, amount) is restricted to intended TEDP use only:

check(from == tedp_account, "distviarex may only distribute TEDP funds");
require_auth(tedp_account);

where tedp_account is exrsrv.tf.

Verification

This is the same source change used for the executed mainnet hotfix.

Mainnet execution transaction:

https://explorer.telos.net/transaction/e5318e118963a4689a7ee1cc631ad297adc0b6a4b314ed83a8634f407c0d61e2

Live mainnet eosio code hash after execution:

02bac64cd7e3fa38e8b34c772ca47b82fe4a3b0c752ad2d8b97ef7ceb752afc8

Post-deploy checks confirmed that arbitrary-account use now fails and from = exrsrv.tf still requires exrsrv.tf authority.

@TheJudii
TheJudii marked this pull request as ready for review June 2, 2026 00:18
@TheJudii
TheJudii force-pushed the hotfix/distviarex-main-sync branch from 446d019 to 368a5af Compare June 2, 2026 15:30
@TheJudii TheJudii changed the title Sync main with deployed system contract hotfix Restrict distviarex to TEDP account Jun 2, 2026
@TheJudii
TheJudii merged commit 3438580 into main Jun 3, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant