Skip to content

BitWindow CoinNews & dc-hub modules: 5 fixes from a security review - #2137

Open
giaki3003 wants to merge 5 commits into
LayerTwo-Labs:masterfrom
giaki3003:fix/w5-area-other-modules
Open

giaki3003 wants to merge 5 commits into
LayerTwo-Labs:masterfrom
giaki3003:fix/w5-area-other-modules

Conversation

@giaki3003

Copy link
Copy Markdown
Contributor

A set of 5 independent fixes to the BitWindow CoinNews & dc-hub modules, stacked on one branch so they can be reviewed together and cherry-picked individually. Based on current master; the branch builds and its tests pass at the tip (12 files changed, 637 insertions(+), 15 deletions(-)).

Fixes (oldest first)

  • b7d7f5a3c drivechain-frontends faucet rate-limit dimensionally disabled (BTC accumulator vs satoshi-sized constant) + dead per-address limit
  • 4fad80576 CoinNews scanner serves orphaned stories after same-height reorg
  • 3a345fa82 CoinNews indexer accepts multi-push OP_RETURN scripts as valid messages
  • e13b1dc50 CoinNews standalone scanner skips parent/target/head resolvability checks, diverges from BitWindow engine
  • e466443ab Relative orchestrator datadir makes downloaded binaries unlaunchable

Each commit is self-contained — git cherry-pick <sha> works for any of them. Happy to split, reorder, or drop any. Finding reports for individual fixes available on request.

giaki3003 and others added 5 commits August 30, 2026 22:01
…TC accumulator vs satoshi-sized constant) + dead per-address limit

Bug: w5-20260616-2015-claudeclaw-confirm-kimicla (primary)
Finding: findings/20260616-2015-claudeclaw-confirm-kimiclaw-faucet-rate-limit-btc-sat-unit-mismatch.md
Severity: R3-T2

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
(cherry picked from commit c0dbfab)
Bug: w5-20260616-1516-kimiclaw-confirm-openclaw- (primary)
Finding: findings/20260616-1516-kimiclaw-confirm-openclaw-drivechain-frontends-coinnews-reorg-stale-feed.md
Severity: R3-T4

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
(cherry picked from commit 81db434)
…essages

Bug: w5-20260617-1318-kimiclaw-confirm-openclaw- (primary)
Finding: findings/20260617-1318-kimiclaw-confirm-openclaw-drivechain-frontends-coinnews-multipush-accepted.md
Severity: R3-T4

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
(cherry picked from commit 0a991fb)
…ty checks, diverges from BitWindow engine

Bug: w5-20260726-1353-kimiclaw-confirm-glmclaw-d (primary)
Finding: findings/20260726-1353-kimiclaw-confirm-glmclaw-drivechain-frontends-coinnews-scanner-skips-parent-target-head-resolvability.md
Severity: R3-T4

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
(cherry picked from commit 250362a)
…able

Bug: w5-20260829-1247-kimiclaw-confirm-openclaw- (primary)
Finding: findings/20260829-1247-kimiclaw-confirm-openclaw-drivechain-frontends-relative-datadir-launch-failure.md
Severity: R3-T4

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
(cherry picked from commit d6d995f)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant