Skip to content

Investigation/bridge upgrade#530

Open
ethereumdegen wants to merge 11 commits into
developfrom
investigation/bridge-upgrade
Open

Investigation/bridge upgrade#530
ethereumdegen wants to merge 11 commits into
developfrom
investigation/bridge-upgrade

Conversation

@ethereumdegen
Copy link
Copy Markdown
Collaborator

No description provided.

ethereumdegen and others added 11 commits May 12, 2026 08:05
- Upgrade ethers v5 → v6, hardhat-ethers → @nomicfoundation/hardhat-ethers v3
- Replace hardhat-waffle with @nomicfoundation/hardhat-chai-matchers
- Update typechain target to ethers-v6, bump typescript and prettier
- Migrate BigNumber → bigint, ethers.utils.* → ethers.*, Contract → BaseContract
- Add helpers/gnosis-safe.ts and helpers/ledger.ts for Safe transaction proposals
- Add propose-upgrade-facet task for diamondCut via Gnosis Safe + Ledger signing
- Update tsconfig target to ES2020 for BigInt operator support

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Forks mainnet at a post-upgrade block to verify that the else-if → else+require
fix in NFTMainnetBridgingToPolygonFacet correctly reverts when a non-owner calls
bridgeNFTsV1, and that the old buggy facet silently skipped the ownership check.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Queried on-chain Transfer events to identify the 82 unique stakers
whose NFTs were stolen via the bridgeNFTsV1 ownership bypass.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…IDs, recovery task

- Add adminMint, adminBurn, adminBurnBatch (onlyRole ADMIN) to PolyTellerNFT.sol
- Resolve V1->V2 token IDs via convertV1TokenId at pre-attack block and add token_id_v2 column to CSV
- Add query_v2_tokenids.sh script for reproducible V2 ID resolution
- Add recover-stolen-nfts hardhat task: batch burns attacker tokens, mints replacements to victims

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant