[entropy] audit: 7. Entropy providers may reveal seed before request …

…is finalized (#1182) * check request at the most recent finalized block * update version
pyth-network · Dec 14, 2023 · d420786 · d420786
1 parent 654c1ea
commit d420786
Show file tree

Hide file tree

Showing 3 changed files with 3 additions and 2 deletions.
diff --git a/fortuna/Cargo.lock b/fortuna/Cargo.lock
diff --git a/fortuna/Cargo.toml b/fortuna/Cargo.toml
@@ -1,6 +1,6 @@
 [package]
 name = "fortuna"
-version = "2.0.0"
+version = "2.0.1"
 edition = "2021"
 
 [dependencies]

diff --git a/fortuna/src/chain/ethereum.rs b/fortuna/src/chain/ethereum.rs
@@ -189,6 +189,7 @@ impl EntropyReader for PythContract {
  ) -> Result<Option<reader::Request>> {
  let r = self
  .get_request(provider_address, sequence_number)
+ .block(ethers::core::types::BlockNumber::Finalized)
  .call()
  .await?;