Skip to content

vesting_escrow: reject backward-moving ledger timestamps (#1615) - #1650

Merged
Wilfred007 merged 3 commits into
Gildado:mainfrom
karanjadavi:fix/issue-1615-timestamp-manipulation-resistance
Oct 7, 2026
Merged

Wilfred007 merged 3 commits into
Gildado:mainfrom
karanjadavi:fix/issue-1615-timestamp-manipulation-resistance

Conversation

@karanjadavi

Copy link
Copy Markdown
Contributor

close #1615

Adds a monotonic-timestamp guard (require_monotonic_timestamp) to claim() and clawback(), independent of the existing same-ledger replay check. Rejects a fund-moving call if the ledger timestamp is behind the last observed value, as defense-in-depth against a manipulated or anomalous timestamp reaching vesting-calculation logic.

Adds claim_rejects_timestamp_regression and clawback_rejects_timestamp_regression tests. Documents the mechanism in contracts/vesting_escrow/README.md.
@drips-wave

drips-wave Bot commented Sep 27, 2026

Copy link
Copy Markdown

@karanjadavi Great news! 🎉 Based on an automated assessment of this PR, the linked Wave issue(s) no longer count against your application limits.

You can now already apply to more issues while waiting for a review of this PR. Keep up the great work! 🚀

Learn more about application limits

@Wilfred007
Wilfred007 merged commit ec5a253 into Gildado:main Oct 7, 2026
3 of 5 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Audit ledger-timestamp logic for manipulation resistance

2 participants