feat(contracts): new challenger

.gitmodules

@@ -4,9 +4,6 @@
 [submodule "bolt-contracts/lib/openzeppelin-contracts"]
 	path = bolt-contracts/lib/openzeppelin-contracts
 	url = https://github.com/OpenZeppelin/openzeppelin-contracts
-[submodule "bolt-contracts/lib/relic-sdk"]
-	path = bolt-contracts/lib/relic-sdk
-	url = https://github.com/Relic-Protocol/relic-sdk
 [submodule "bolt-contracts/lib/core"]
 	path = bolt-contracts/lib/core
 	url = https://github.com/symbioticfi/core

bolt-contracts/.gas-snapshot

@@ -0,0 +1,32 @@
+BoltChallengerTest:testCommitmentDigestAndSignature() (gas: 4626)
+BoltChallengerTest:testCommitmentSignature() (gas: 6754)
+BoltChallengerTest:testOpenAlreadyExistingChallenge() (gas: 16032)
+BoltChallengerTest:testOpenChallenge() (gas: 379747)
+BoltChallengerTest:testOpenChallengeInvalidSignature() (gas: 22416)
+BoltChallengerTest:testOpenChallengeWithInsufficientBond() (gas: 16738)
+BoltChallengerTest:testOpenChallengeWithLargebond() (gas: 388679)
+BoltChallengerTest:testOpenChallengeWithSlotInTheFuture() (gas: 17029)
+BoltChallengerTest:testProveAccountData() (gas: 355542)
+BoltChallengerTest:testProveHeaderData() (gas: 45617)
+BoltChallengerTest:testProveTransactionInclusion() (gas: 176543)
+BoltChallengerTest:testResolveChallengeFullDefense() (gas: 575605)
+BoltManagerEigenLayerTest:testGetNonExistentProposerStatus() (gas: 921620)
+BoltManagerEigenLayerTest:testGetWhitelistedCollaterals() (gas: 99988)
+BoltManagerEigenLayerTest:testNonWhitelistedCollateral() (gas: 103013)
+BoltManagerEigenLayerTest:testProposersLookaheadStatus() (gas: 2142632)
+BoltManagerEigenLayerTest:test_deregisterEigenLayerOperatorFromAVS() (gas: 898067)
+BoltManagerEigenLayerTest:test_getEigenLayerOperatorStake() (gas: 935483)
+BoltManagerEigenLayerTest:test_getEigenLayerProposerStatus() (gas: 938074)
+BoltManagerTest:testGetNonExistentProposerStatus() (gas: 1197534)
+BoltManagerTest:testGetProposerStatus() (gas: 1431371)
+BoltManagerTest:testGetWhitelistedCollaterals() (gas: 16818)
+BoltManagerTest:testNonWhitelistedCollateral() (gas: 41889)
+BoltManagerTest:testProposersLookaheadStatus() (gas: 2421869)
+BoltManagerTest:testReadOperatorStake() (gas: 1520048)
+BoltValidatorsTest:testUnsafeRegistration() (gas: 145625)
+BoltValidatorsTest:testUnsafeRegistrationFailsIfAlreadyRegistered() (gas: 143729)
+BoltValidatorsTest:testUnsafeRegistrationInvalidCollateralProvider() (gas: 18821)
+BoltValidatorsTest:testUnsafeRegistrationInvalidOperator() (gas: 19050)
+BoltValidatorsTest:testUnsafeRegistrationWhenNotAllowed() (gas: 22565)
+TransactionDecoderTest:testDecodeAllTestCases() (gas: 0)
+TransactionDecoderTest:testDecodeGasUsage() (gas: 53281)

bolt-contracts/.gitignore

@@ -3,3 +3,6 @@ out/
 broadcast/
 
 .env
+
+node_modules/
+target/

bolt-contracts/README.md

@@ -151,7 +151,61 @@ The steps required are the following:
 
 ## Fault Proof Challenge and Slashing: `BoltChallenger`
 
-WIP
+The [`BoltChallenger`](./src/contracts/BoltChallenger.sol) contract is the component responsible
+for handling fault attribution in the case of a validator failing to meet their commitments.
+
+In short, the challenger contract allows any user to challenge a validator's commitment by opening
+a dispute with the following inputs:
+
+1. The signed commitment made by the validator
+2. An ETH bond to cover the cost of the dispute and disincentivize frivolous challenges
+
+The entrypoint is the `openChallenge` function. Once a challenge is opened, a `ChallengeOpened` event
+is emitted, and any arbitrator has a time window to submit a valid response to settle the dispute.
+
+### Dispute resolution
+
+The dispute resolution process is one-shot and requires the arbitrator to submit all necessary evidence
+of the validator's correct behaviour within the challenge time window.
+
+The arbitrator is _anyone_ who can submit a valid response to the challenge. It doesn't have to be the
+validator themselves. There is however one limitation: the time window for submitting a response must be
+respected in the following way:
+
+- Start: the target block must be justified by LMD-GHOST: a minimum of 32 slots must have passed
+- End: depending on the EVM block hash oracle:
+  - . If using the `BLOCKHASH` EVM opcode, the window is limited to 256 blocks (roughly 1 hour)
+  - . If using the [EIP-2935](https://eips.ethereum.org/EIPS/eip-2935) historical oracle, the window is limited to 8192 blocks (roughly 1 day)
+
+The inputs to the resolution process are as follows:
+
+1. The ID of the challenge to respond to: this is emitted in the `ChallengeOpened` event and is unique.
+2. The [inclusion proofs](https://github.com/chainbound/bolt/blob/6c0f1b696cfe3de7e7e3830ac28c369c6ddf271e/bolt-contracts/src/interfaces/IBoltChallenger.sol#L39), consisting of the following components:
+   - the block number of the block containing the included transaction
+   - the RLP-encoded block header of the block containing the included transaction
+   - the account merkle proof of the sender of the included transaction
+   - the transaction merkle proof of the included transaction against the header's transaction root
+   - the transaction index in the block of the included transaction
+
+If the arbitrator submits a valid response that satisfies the requirements for the challenge, the
+challenge is considered DEFENDED and the challenger's bond is slashed to cover the cost of the dispute
+and to incentivize speedy resolution.
+
+If no arbitrators respond successfully within the challenge time window, the challenge is considered
+LOST and the `BoltChallenger` will keep track of this information for future reference.
+
+### Slashing of validators
+
+If a challenge is LOST (as per the above definition), the validator's stake should be slashed to cover
+the cost of a missed commitment. This is done by calling the `slash` function on the correct staking adapter
+and reading into the `BoltChallenger` contract to trustlessly determine if the challenge was lost.
+
+In practice, slashing behaviour is abstracted behind any staking adapter – an example is Symbiotic's `VetoSlasher`
+which will receive a request to slash a validator's stake and will have a last opportunity to veto
+the slashing request before it is executed on-chain.
+
+Subscribing to lost challenges from the `BoltChallenger` is a trustless way to determine if a slashing request
+is valid according to Bolt Protocol rules.
 
 ## Testing
 

bolt-contracts/foundry.toml

@@ -21,6 +21,7 @@ remappings = [
   "@relic/=lib/relic-sdk/packages/contracts",
   "@symbiotic/=lib/core/src/",
   "@eigenlayer/=lib/eigenlayer-contracts/",
+  "@openzeppelin/contracts/=lib/openzeppelin-contracts/contracts",
 
   # Symbiotic remappings contexts
   "lib/core/:forge-std/=lib/core/lib/forge-std/src/",