A decentralized bitcoin exchange network
Find a file
Steven Barclay 915a79e627
Fix BSQ swap buyer tx fee theft vulnerability
Prevent the seller from stealing the combined tx fee as change by lying
about the value of one or more of his BTC inputs, which are passed to
the buyer as raw inputs in the 'BsqSwapFinalizeTxRequest' message.

To this end, add a 'RawTransactionInput::validate' method to check the
'value' field against the output value of the respective spending tx and
run it on every seller input in 'ProcessBsqSwapFinalizeTxRequest', so
that the buyer is no longer just trusting those numbers.

Additionally, check that the spending txIds from the raw BTC inputs
supplied by the seller actually match those of his signed inputs in the
accompanying partially signed tx, thus tying the raw input values to the
seller's tx.
2021-12-02 17:19:10 +00:00
.github Print dependency report if failure 2021-11-25 10:50:04 +01:00
.idea Rename :protodefintion subproject to :proto 2020-03-26 17:37:37 +01:00
apitest Add official Java 15 support 2021-11-25 10:50:03 +01:00
assets/src Changes required for GRIN re-listing 2021-11-10 14:23:04 -06:00
cli/src Remove white space 2021-11-07 14:19:38 -03:00
common/src Merge pull request #5817 from chimp1984/fix-incorrect-app-initialisation 2021-11-10 19:22:03 +01:00
core Fix BSQ swap buyer tx fee theft vulnerability 2021-12-02 17:19:10 +00:00
daemon/src Remove code which is already in superclass 2021-11-23 23:22:28 +01:00
desktop Update package.gradle: rely on local JDK 15 2021-11-25 10:50:05 +01:00
docs Improve release build documentation 2021-11-25 10:50:05 +01:00
gradle Fix guava dependency issue 2021-11-21 17:06:10 +01:00
inventory/src/main Move Utilities.objectToJson to JsonUtil.objectToJson 2021-11-02 16:18:50 +01:00
monitor Move OfferPayload into package bisq.core.offer.bisq_v1 2021-11-02 15:35:51 +01:00
p2p/src Clean up log 2021-11-09 20:00:34 +01:00
pricenode Upgrade to Gradle 7.3 2021-11-13 12:09:22 +01:00
proto/src/main/proto Merge pull request #5834 from jmacxx/dispute_ui_add_penalty 2021-11-18 17:57:54 +01:00
relay Revert to SNAPSHOT version 2021-10-29 16:06:49 +02:00
scripts make all scripts executable 2021-11-30 12:40:06 +01:00
seednode Enforce inclusion of TradeLimits for headless apps 2021-11-23 21:34:43 +01:00
statsnode/src/main Enforce inclusion of TradeLimits for headless apps 2021-11-23 21:34:43 +01:00
.editorconfig Do not strip trailing whitespace in Git diffs 2020-01-10 19:48:26 +01:00
.gitattributes Add git lfs support for BsqBlocks in resources 2021-11-09 17:22:35 +01:00
.gitignore Git-ignore apitest dao-setup files 2021-01-28 14:21:30 -03:00
.travis.yml Update travis config to Java 11 2021-02-01 18:03:26 +01:00
build.gradle Set gradle java src & target compat = VERSION_11 2021-11-23 17:43:12 -03:00
CODEOWNERS Remove @cbeams as build and pricenode code owner 2020-06-28 11:23:36 +02:00
CONTRIBUTING.md Switch old docs links to wiki links 2021-04-27 16:29:14 -04:00
gradle.properties Build: Change default console to plain 2021-05-25 09:27:08 +02:00
gradlew Upgraded Gradle to v6.6.1 2020-09-17 01:59:51 +02:00
gradlew.bat Upgraded Gradle to v6.6.1 2020-09-17 01:59:51 +02:00
LICENSE add basic wallet, update nav buttons, move unused img 2014-04-24 16:55:55 +02:00
Makefile Update link to OpenJDK archive 2021-04-23 10:31:11 +02:00
pull_request_template.md Added a Pull Request template 2019-11-27 13:46:54 +01:00
README.md jdk10 is no longer needed to build and run the test suite 2019-08-14 18:11:57 +02:00
settings.gradle Add inventory module 2020-10-23 01:17:32 -05:00

Bisq

Build Status

What is Bisq?

Bisq is a safe, private and decentralized way to exchange bitcoin for national currencies and other digital assets. Bisq uses peer-to-peer networking and multi-signature escrow to facilitate trading without a third party. Bisq is non-custodial and incorporates a human arbitration system to resolve disputes.

To learn more, see the doc and video at https://bisq.network/intro.

Get started using Bisq

Follow the step-by-step instructions at https://bisq.network/get-started.

Contribute to Bisq

See CONTRIBUTING.md and the developer docs.