Skip to content

feat(zk): implement verifiable address-binding for withdrawals (ZK-072)#449

Open
axiawang wants to merge 1 commit into
ANAVHEOBA:mainfrom
axiawang:feat/zk-072-recipient-binding
Open

feat(zk): implement verifiable address-binding for withdrawals (ZK-072)#449
axiawang wants to merge 1 commit into
ANAVHEOBA:mainfrom
axiawang:feat/zk-072-recipient-binding

Conversation

@axiawang
Copy link
Copy Markdown

@axiawang axiawang commented May 6, 2026

  • Replace lossy recipient decoding with secure SHA-256 binding.
  • Update withdrawal contract to verify recipient binding mismatch.
  • Update SDK address encoding to match on-chain hash logic.
  • Add negative tests for mismatched recipients.

Wave Ticket

Wave Issue Key: ZK-___

Linked issue:

  • Closes #

What Changed

Validation

  • I linked the ZK ticket key above.
  • I ran node scripts/zk_ticket_check.mjs --issue-key ZK-___.
  • I ran the derived checks locally for the ticket I am implementing.
  • I updated tests or fixtures when the ticket changed circuit or witness behavior.

Validation output:

paste the command output here

- Replace lossy recipient decoding with secure SHA-256 binding.
- Update withdrawal contract to verify recipient binding mismatch.
- Update SDK address encoding to match on-chain hash logic.
- Add negative tests for mismatched recipients.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant