Skip to content

Harden the RFQ venue: maker approval and quote cancellation#24

Open
heijiLee wants to merge 4 commits into
fix/router-venue-type-bindingfrom
feature/rfq-v2-hardening
Open

Harden the RFQ venue: maker approval and quote cancellation#24
heijiLee wants to merge 4 commits into
fix/router-venue-type-bindingfrom
feature/rfq-v2-hardening

Conversation

@heijiLee

@heijiLee heijiLee commented Jul 4, 2026

Copy link
Copy Markdown
Contributor

RFQ v2 hardening (RFQ-002), stacked on #23.

  • Operator-curated maker allowlist: setMakerApproved (onlyOperator), settlement rejects unapproved makers (RFQMakerNotApproved)
  • Maker-initiated cancellation: cancelQuoteNonce/cancelQuoteNonces, idempotent, reuses the usedQuoteNonce fill guard
  • Policy decisions recorded as D007: full-fill only, non-custodial, adapter-local approval
  • New docs/rfq-threat-model.md + FEATURES/PROGRESS/security.md bookkeeping

Tests: forge test --offline 133/133 (9 new RFQAdapter tests), services/rfq smoke ok. EIP-712 surface unchanged (offchain signer compatible).

Deferred: router-path integration scenarios (tracked in PROGRESS Next).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant