Skip to content

Protocol update to allow recovery of stolen funds#22237

Merged
mystenmark merged 9 commits intomainfrom
recover-via-address-alias
May 30, 2025
Merged

Protocol update to allow recovery of stolen funds#22237
mystenmark merged 9 commits intomainfrom
recover-via-address-alias

Conversation

@mystenmark
Copy link
Copy Markdown
Contributor

This Pull Request implements a path to recover stolen Cetus funds from the two hacker addresses, in the event that the community vote passes.

The recovery is implemented as follows:

  • ProtocolConfig can specify address aliases which allow a signature from address A to act as the sender address B.
  • The aliasing is restricted to a specified set of TransactionDigests. Only those exact transactions may be aliased.
  • The address deny list is bypassed for any allowed transaction.

The exact transaction digests and addresses are TBD, but in the event the governance vote passes, the transactions will be made available for inspection by validators and the community prior to doing the protocol upgrade.

@mystenmark mystenmark temporarily deployed to sui-typescript-aws-kms-test-env May 27, 2025 21:36 — with GitHub Actions Inactive
@vercel
Copy link
Copy Markdown

vercel bot commented May 27, 2025

The latest updates on your projects. Learn more about Vercel for Git ↗︎

Name Status Preview Comments Updated (UTC)
sui-docs ✅ Ready (Inspect) Visit Preview 💬 Add feedback May 29, 2025 3:36am
2 Skipped Deployments
Name Status Preview Comments Updated (UTC)
multisig-toolkit ⬜️ Ignored (Inspect) Visit Preview May 29, 2025 3:36am
sui-kiosk ⬜️ Ignored (Inspect) Visit Preview May 29, 2025 3:36am

@mystenmark mystenmark force-pushed the recover-via-address-alias branch from 6a7513f to 617af21 Compare May 29, 2025 03:35
@mystenmark mystenmark temporarily deployed to sui-typescript-aws-kms-test-env May 29, 2025 03:35 — with GitHub Actions Inactive
mystenmark added a commit that referenced this pull request May 29, 2025
…#22259)

## Release notes

Check each box that your changes affect. If none of the boxes relate to
your changes, release notes aren't required.

For each box you select, include information after the relevant heading
that describes the impact of your changes that a user might notice and
any actions they must take to implement updates.

- [x] Protocol: upgrade to allow recovery of stolen funds in accordance
with community vote
- [ ] Nodes (Validators and Full nodes): 
- [ ] gRPC:
- [ ] JSON-RPC: 
- [ ] GraphQL: 
- [ ] CLI: 
- [ ] Rust SDK:
@mystenmark mystenmark merged commit 3efe6d4 into main May 30, 2025
53 of 54 checks passed
@mystenmark mystenmark deleted the recover-via-address-alias branch May 30, 2025 03:51
mskd12 pushed a commit that referenced this pull request May 30, 2025
This Pull Request implements a path to recover stolen Cetus funds from
the two hacker addresses, in the event that the community vote passes.

The recovery is implemented as follows:

- ProtocolConfig can specify address aliases which allow a signature
from address A to act as the sender address B.
- The aliasing is restricted to a specified set of TransactionDigests.
Only those exact transactions may be aliased.
- The address deny list is bypassed for any allowed transaction.

The exact transaction digests and addresses are TBD, but in the event
the governance vote passes, the transactions will be made available for
inspection by validators and the community prior to doing the protocol
upgrade.
mystenmark added a commit that referenced this pull request Jun 2, 2025
…#22258)

## Release notes

Check each box that your changes affect. If none of the boxes relate to
your changes, release notes aren't required.

For each box you select, include information after the relevant heading
that describes the impact of your changes that a user might notice and
any actions they must take to implement updates.

- [x] Protocol: upgrade to allow recovery of stolen funds in accordance
with community vote
- [ ] Nodes (Validators and Full nodes): 
- [ ] gRPC:
- [ ] JSON-RPC: 
- [ ] GraphQL: 
- [ ] CLI: 
- [ ] Rust SDK:
damirka pushed a commit that referenced this pull request Jul 17, 2025
This Pull Request implements a path to recover stolen Cetus funds from
the two hacker addresses, in the event that the community vote passes.

The recovery is implemented as follows:

- ProtocolConfig can specify address aliases which allow a signature
from address A to act as the sender address B.
- The aliasing is restricted to a specified set of TransactionDigests.
Only those exact transactions may be aliased.
- The address deny list is bypassed for any allowed transaction.

The exact transaction digests and addresses are TBD, but in the event
the governance vote passes, the transactions will be made available for
inspection by validators and the community prior to doing the protocol
upgrade.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants