code/voting
Watch
4
0
Fork
You've already forked voting
 0
Code Issues 12 Pull requests Projects Releases Packages Wiki Activity

feat(voting): BSC BEP20 CL8Y ledger + EVM wallet voting (core electorate) #4

New issue
Closed
opened 2026-08-21 11:32:36 +00:00 by PlasticDigits · 26 comments
PlasticDigits commented 2026-08-21 11:32:36 +00:00 (Migrated from gitlab.com)

Moved 2026-08-25 to PlasticDigits/voting. Implement in ~/repos/voting, not in cl8y-dex-terraclassic.

Paths below (indexer/, frontend-dapp/, …) are design references from the DEX tree. Ledger, operator-voting, and the dApp belong in this repo.

New required constraints: Legal clickwrap (#5) · wallet reuse DEX Terra + Bridge EVM (#6). BSC is core (#4).

Bundle here: #1 ledger · #2 operator-voting · #3 dApp · #4 BSC/EVM · #5 Legal · #6 wallets.

Former DEX IIDs: #509 → #1, #510 → #2, #511 → #3, #588 → #4.

Summary

BSC is core to the voting electorate, not an optional extra. A majority of CL8Y holders are on BNB Smart Chain (BEP-20), not Terra Classic CW20. Shipping cl8y-dex-terraclassic#509 / cl8y-dex-terraclassic#510 / cl8y-dex-terraclassic#511 as Terra-only would exclude most tokenholders from registration, proposal weight, and ballots.

Extend the offchain snapshot-voting bundle so that:

  1. The indexer tracks BEP-20 CL8Y balances for registered EVM wallets (live balanceOf at registration + Transfer logs forward — same “no archive node” model as cl8y-dex-terraclassic#509).
  2. operator-voting accepts EVM wallet signatures (EIP-191 personal_sign) for register / propose / vote, and freezes vote power from both the Terra CW20 ledger and the BSC BEP-20 ledger.
  3. The dApp lets holders connect an EVM wallet (MetaMask / WalletConnect EIP-155) and complete the same /vote flows.

No new Solidity or CosmWasm contracts. Frontend + Postgres + indexer + operator-voting only.

BEP-20 CL8Y (canonical BSC): 0x8F452a1fdd388A45e1080992eFF051b4dd9048d2 (CL8Y_v2, 18 decimals) — same asset brand as Terra CW20 terra16wtml…hpax3. Configurable via env (BSC_CL8Y_TOKEN_ADDRESS).

Terra CW20 (unchanged, cl8y-dex-terraclassic#509): terra16wtml2q66g82fdkx66tap0qjkahqwp4lwq3ngtygacg5q0kzycgqvhpax3.

This issue is the cross-chain / EVM work item. It does not replace cl8y-dex-terraclassic#509–cl8y-dex-terraclassic#511; those issues must include BSC in their scope (see comments on each).

Bundle

Issue Role after this work
cl8y-dex-terraclassic#509 Indexer/Postgres registration + Terra CW20 and BSC BEP-20 ledgers for registered wallets
cl8y-dex-terraclassic#510 operator-voting — Cosmos ADR-36 and EVM EIP-191 sigs; snapshot = Terra height plus BSC block; blacklist includes 0x addresses
cl8y-dex-terraclassic#511 dApp register / propose / vote for Keplr/Station and EVM wallets
This issue BSC integration contract: token pin, RPC/log indexing, snapshot pairing, EVM identity, double-count/bridge rules

Why this is needed

cl8y-dex-terraclassic#509–cl8y-dex-terraclassic#511 currently assume a Terra Classic wallet + CW20 Balance + wasm transfer events. That is correct for the DEX’s home chain and for fee-discount cl8y_token, but it is not the majority CL8Y holder set.

Without BSC:

  • Most CL8Y cannot register or vote.
  • Proposal threshold (≥1000 CL8Y in cl8y-dex-terraclassic#511) is measured on the minority chain only.
  • Snapshot tallies systematically under-weight the token.

Venus eth_call on BSC_RPC_URLS (cl8y-dex-terraclassic#571) already proves the indexer can talk to BSC JSON-RPC. That path is oracle-only and must not be overloaded. Voting needs a separate BEP-20 ledger + EVM auth plane.

Current codebase

Area Status
BSC JSON-RPC indexer/src/indexer/venus_vfdusd.rs + config.bsc_rpc_urls (BSC_RPC_URLS) — Venus vFDUSD eth_call only. No eth_getLogs, no ERC-20 balanceOf, no Transfer parser
Browser BSC Forbidden for oracle (cl8y-dex-terraclassic#571 V571-5): no VITE_* BSC RPC, no BscScan from the dApp. Wallet provider connect for signing is a new surface
EVM wallets in dApp Cosmos-only: Keplr / Station / WC / Simulated Wallet (frontend-dapp/src/services/terraclassic/wallet.ts). WalletConnect is EIP-155 Cosmos pairing (cl8y-dex-terraclassic#519 / cl8y-dex-terraclassic#554 / cl8y-dex-terraclassic#566), not BSC
Legal EVM sign Hosted portal https://terms.cl8y.com/sign/evm (cl8y-dex-terraclassic#517 clickwrap) — external redirect, not in-app MetaMask; do not reuse as voting auth
Voting ledger Not implemented (cl8y-dex-terraclassic#509). Designed for CW20 wasm events only
operator-voting Not implemented (cl8y-dex-terraclassic#510). Designed for ADR-36 / Terra bech32
Frontend /vote Not implemented (cl8y-dex-terraclassic#511). Designed for Terra signArbitrary

Constraints / guardrails

  1. Core, not phase-2. Do not ship Terra-only voting to production as “done.” BSC registration + BEP-20 weight must land with (or immediately after) the Terra path; a Terra-only electorate is an incomplete product.
  2. No new contracts on BSC or Terra. Do not deploy a voting token, snapshot contract, or governor.
  3. No BSC archive-node requirement. Registration balance = live balanceOf(wallet) at current eth_blockNumber. History afterward = Transfer logs for the registered set only (mirror cl8y-dex-terraclassic#509).
  4. Pin the token. Only trust logs/balanceOf for configured BSC_CL8Y_TOKEN_ADDRESS (default 0x8F452a1fdd388A45e1080992eFF051b4dd9048d2). Ignore other BEP-20s and lookalike tickers.
  5. 18-decimal raw integer amounts as strings / NUMERIC — same as CW20; no float.
  6. Registered-set filter. Index Transfer logs only when from or to is a registered EVM address (plus the registered counterparty). Do not ingest the full CL8Y holder universe.
  7. Reuse BSC_RPC_URLS transport, not the Venus module. New indexer module (e.g. bsc_cl8y_ledger.rs). Empty BSC_RPC_URLS skips live BSC (CI/LocalTerra) the same way cl8y-dex-terraclassic#571 does. Never log RPC URLs/keys. Soft-fail RPC must not invent balances.
  8. Browser must not grow Vite BSC RPC hosts for balance reads (keep V571-5). Indexer owns eth_call / eth_getLogs. Injected/WC provider is only for connect + personal_sign.
  9. Snapshot pairing. A proposal freezes both a Terra Classic height (existing cl8y-dex-terraclassic#509) and a BSC block number taken at create time (wall-clock aligned). Vote weight for an address is the ledger balance on its chain at that chain’s frozen height/block. Document inclusive block ordering.
  10. Identity v1 = one address, one voter. A Terra terra1… registration and a 0x… registration are distinct voters unless product later adds explicit linking. Do not silently merge by heuristic.
  11. No double-count of the same units. Terra CW20 and BSC BEP-20 are separately circulating supplies today (not a lock-and-mint bridge in this repo). Each registered address votes its chain balance. If an official bridge later locks tokens on one side, document so locked/in-flight supply is not counted twice. Do not convert via USD or DEX pool prices.
  12. Blacklist (VOTING_BLACKLIST_ADDRESSES) must accept normalized 0x (EIP-55 checksum optional; compare case-insensitive) and Terra bech32.
  13. Propose threshold (≥1000 CL8Y) is evaluated against the registering address’s chain ledger (BEP-20 for EVM, CW20 for Terra). Do not sum unrelated addresses.
  14. Reorgs: BSC reorg unwind/replay for registered EVM wallets; do not share tables with Venus venus_vfdusd_rates.
  15. Do not use fee-discount tiers, trader_positions, or PancakeSwap LP as vote weight.
  16. Do not break Cosmos WalletConnect mobile pairing (cl8y-dex-terraclassic#519 / cl8y-dex-terraclassic#554 / cl8y-dex-terraclassic#566) when adding EIP-155.

Relevant files

Indexer / BSC I/O

  • indexer/src/config.rs (bsc_rpc_urls)
  • indexer/src/indexer/venus_vfdusd.rs (RPC failover / eth_call pattern — do not overload)
  • indexer/src/startup.rs, indexer/src/lcd/mod.rs (Terra live balance analogue)
  • indexer/migrations/, docs/indexer-invariants.md
  • New: BEP-20 Transfer log parser + balanceOf registration ingest + BSC height/block cursor

operator-voting (cl8y-dex-terraclassic#510)

  • New package: EIP-191 recover (ecrecover over keccak256("\x19Ethereum Signed Message:\n" + len + message)), chain-id / domain separation, EVM address normalize
  • Restricted SQL: voting_bsc_cl8y_balance_at(wallet, block) beside Terra voting_cl8y_balance_at

Frontend (cl8y-dex-terraclassic#511)

  • frontend-dapp/src/services/terraclassic/wallet.ts, hooks/useWallet.ts, WalletConnect pairing stores (cl8y-dex-terraclassic#554)
  • frontend-dapp/src/utils/legalClickwrap.ts (Legal EVM portal is not voting)
  • New: EVM connect + personal_sign helper; /vote copy that Terra or BSC holders can register
  • Skills: AGENTS_FRONTEND_WALLETCONNECT_MOBILE.md, AGENTS_FRONTEND_COPY_COGNITIVE_LOAD.md, AGENTS_INDEXER_VENUS_VFDUSD.md (RPC hygiene)

Env / deploy

  • BSC_RPC_URLS (existing), BSC_CL8Y_TOKEN_ADDRESS, Coolify indexer + operator-voting + frontend examples
  • VITE_* must not include BSC RPC URLs

Recommended direction

Indexer (extends #509)

  • Tables (illustrative): voting_registrations gains chain (terra | bsc) + address; cl8y_bep20_transfers (bsc_block, tx_hash, log_index, from, to, amount); cl8y_bsc_balances checkpoints for balance(wallet, bsc_block) when block >= registered_at_block.
  • On EVM register: eth_blockNumber + eth_call balanceOf(address) on pinned CL8Y; persist; no historical eth_getLogs backfill unless explicitly designed (default no backfill, same as cl8y-dex-terraclassic#509).
  • Poll eth_getLogs for Transfer topic 0xddf252ad… on the pinned token; filter to registered set; handle mint/burn (from/to zero address).
  • Cursor + reorg: store last processed BSC block; unwind like Terra indexer_state.

operator-voting (extends #510)

  • Verify either ADR-36 (Terra) or EIP-191 (EVM) from payload chain / recovered address.
  • Proposal create records { terra_height, bsc_block, created_at }.
  • Tally: Terra voters use CW20 ledger; EVM voters use BEP-20 ledger; never mix units into USD.
  • Blacklist + rate limits apply to both address formats.

Frontend (extends #511)

  • Wallet modal: keep Terra connectors; add BSC (injected EIP-1193 + WalletConnect eip155:56).
  • Register / propose / vote: sign canonical bytes with the connected wallet’s scheme; show which chain’s CL8Y is counted.
  • Copy: registration is required on the chain you hold before a proposal you care about is created; do not imply on-chain DAO finality.
  • Simulated / test path: mocked EVM signer for vitest; do not require live MetaMask in CI.

Acceptance criteria

  • Configurable pinned BEP-20 CL8Y address; indexer fails closed when the BSC voting feature is enabled and the address/RPC config is invalid.
  • Registering an EVM wallet stores live balanceOf + current BSC block; no archive/debug_trace requirement.
  • Subsequent BEP-20 Transfers to/from that wallet update the BSC ledger; unregistered EVM traffic is not stored (except as counterparty on a registered leg).
  • balance(evm, B) for B >= registered_at_block is reconstructible from the ledger; property/integration tested with fixtures (wiremock / Anvil — not live mainnet).
  • operator-voting accepts EIP-191 register / propose / vote from the recovered 0x address; Terra ADR-36 path still works.
  • Proposal snapshot stores Terra height and BSC block; EVM vote weight uses the BSC ledger at that block (not tip).
  • Blacklist matches normalized EVM addresses; denylisted 0x cannot vote or propose.
  • dApp can connect an EVM wallet and complete register → (optional) propose if ≥1000 BEP-20 CL8Y → vote.
  • Cosmos WalletConnect mobile flows (cl8y-dex-terraclassic#519 / cl8y-dex-terraclassic#554 / cl8y-dex-terraclassic#566) still pass.
  • No VITE_* BSC RPC; no Venus poller reuse; docs/invariants/Coolify env updated.
  • Linked cl8y-dex-terraclassic#509 / cl8y-dex-terraclassic#510 / cl8y-dex-terraclassic#511 describe BSC in-scope (this issue + comments).

Test plan (all paths)

  1. Unit — log parser: Transfer fixtures for pinned token; ignore other contracts; mint/burn; registered vs unregistered from/to.
  2. Unit — balance math: sequential Transfers; self-transfer; 18-dec strings.
  3. Unit — EIP-191: recover matches signer; rejects wrong length / v / replayed Terra payload.
  4. Integration — registration: mock RPC balanceOf at block N; row matches.
  5. Integration — follow: register A; A→B (B unregistered): A decreases, B not a voter; later B register is a new live snapshot (no backfill).
  6. Integration — snapshot: transfers at B1,B2,B3; query at B2 returns post-B2; vote after sell still uses snapshot block.
  7. Cross-chain isolation: Terra transfers do not change EVM weight and vice versa.
  8. Frontend: EVM connect + sign happy path (mock provider); Terra path unchanged; disconnected / wrong-chain (not 56) errors.
  9. WC regression: existing Cosmos WC unit tests still pass.
  10. Config: empty BSC_RPC_URLS skips BSC ledger when feature optional in CI; production voting compose requires it.

Test plan — attack, hack & abuse vectors

  1. Lookalike token: Transfer logs from a fake CL8Y BEP-20 — must ignore.
  2. RPC spoof / SSRF: BSC_RPC_URLS remains env-only (existing I389-18 class); do not take RPC URL from client.
  3. Signature cross-scheme: Terra ADR-36 blob submitted as EVM vote (and reverse) — reject.
  4. Replay: same EVM sig on another proposal / chain id / domain — reject.
  5. Checksum / case tricks: 0xabc… vs 0xAbC… must be one wallet; blacklist bypass via case must fail.
  6. Unregistered log flood: spam Transfers among unregistered EVM wallets — no unbounded rows.
  7. Flash move before snapshot: large BEP-20 into a registered wallet — counted by design; document (same as cl8y-dex-terraclassic#509).
  8. Bridge double-count: document current separately-circulating assumption; add a test note if a lock address is later excluded.
  9. Venus coupling: BSC CL8Y indexer outage must not break vFDUSD oracle and vice versa.
  10. Phishing copy: UI must not ask for EVM seed; only wallet popup sign. Do not send users to BscScan to “verify voting.”

Verification criteria

  • Indexer unit + integration tests for BEP-20 ledger (Postgres; mocked BSC).
  • operator-voting tests for EIP-191 + mixed Terra/EVM blacklist + dual snapshot fields.
  • Frontend vitest for EVM gates / client; Cosmos WC tests still green.
  • Docs: docs/indexer-invariants.md + Coolify env; skill notes that voting BSC I/O ≠ Venus.
  • Manual or staging: MetaMask on BSC register + vote; Keplr Terra path still works.
  • Confirm production voting is not marked complete while BSC holders cannot participate.

Labels

architecture backend frontend indexer enhancement security product UX

Priority

P1 — core electorate. Majority of CL8Y is BEP-20 on BSC.

> **Moved 2026-08-25** to [PlasticDigits/voting](https://gitlab.com/PlasticDigits/voting). Implement in `~/repos/voting`, **not** in `cl8y-dex-terraclassic`. > > Paths below (`indexer/`, `frontend-dapp/`, …) are **design references** from the DEX tree. Ledger, `operator-voting`, and the dApp belong in this repo. > > **New required constraints:** Legal clickwrap (**#5**) · wallet reuse DEX Terra + Bridge EVM (**#6**). BSC is core (**#4**). > > Bundle here: **#1** ledger · **#2** operator-voting · **#3** dApp · **#4** BSC/EVM · **#5** Legal · **#6** wallets. > > Former DEX IIDs: #509 → #1, #510 → #2, #511 → #3, #588 → #4. --- ## Summary **BSC is core to the voting electorate, not an optional extra.** A majority of CL8Y holders are on **BNB Smart Chain (BEP-20)**, not Terra Classic CW20. Shipping cl8y-dex-terraclassic#509 / cl8y-dex-terraclassic#510 / cl8y-dex-terraclassic#511 as Terra-only would exclude most tokenholders from registration, proposal weight, and ballots. Extend the offchain snapshot-voting bundle so that: 1. The indexer tracks **BEP-20 CL8Y balances** for **registered EVM wallets** (live `balanceOf` at registration + Transfer logs forward — same “no archive node” model as cl8y-dex-terraclassic#509). 2. `operator-voting` accepts **EVM wallet signatures** (EIP-191 `personal_sign`) for register / propose / vote, and freezes vote power from **both** the Terra CW20 ledger and the BSC BEP-20 ledger. 3. The dApp lets holders **connect an EVM wallet** (MetaMask / WalletConnect EIP-155) and complete the same `/vote` flows. **No new Solidity or CosmWasm contracts.** Frontend + Postgres + indexer + `operator-voting` only. **BEP-20 CL8Y (canonical BSC):** [`0x8F452a1fdd388A45e1080992eFF051b4dd9048d2`](https://bscscan.com/token/0x8F452a1fdd388A45e1080992eFF051b4dd9048d2) (`CL8Y_v2`, 18 decimals) — same asset brand as Terra CW20 `terra16wtml…hpax3`. Configurable via env (`BSC_CL8Y_TOKEN_ADDRESS`). **Terra CW20 (unchanged, cl8y-dex-terraclassic#509):** `terra16wtml2q66g82fdkx66tap0qjkahqwp4lwq3ngtygacg5q0kzycgqvhpax3`. This issue is the **cross-chain / EVM work item**. It does **not** replace cl8y-dex-terraclassic#509–cl8y-dex-terraclassic#511; those issues must include BSC in their scope (see comments on each). ### Bundle | Issue | Role after this work | |-------|----------------------| | **cl8y-dex-terraclassic#509** | Indexer/Postgres registration + **Terra CW20 and BSC BEP-20** ledgers for registered wallets | | **cl8y-dex-terraclassic#510** | `operator-voting` — Cosmos ADR-36 **and** EVM EIP-191 sigs; snapshot = Terra height **plus** BSC block; blacklist includes `0x` addresses | | **cl8y-dex-terraclassic#511** | dApp register / propose / vote for **Keplr/Station and EVM wallets** | | **This issue** | BSC integration contract: token pin, RPC/log indexing, snapshot pairing, EVM identity, double-count/bridge rules | --- ## Why this is needed cl8y-dex-terraclassic#509–cl8y-dex-terraclassic#511 currently assume a Terra Classic wallet + CW20 `Balance` + wasm transfer events. That is correct for the DEX’s home chain and for fee-discount `cl8y_token`, but it is **not** the majority CL8Y holder set. Without BSC: - Most CL8Y cannot register or vote. - Proposal threshold (≥1000 CL8Y in cl8y-dex-terraclassic#511) is measured on the minority chain only. - Snapshot tallies systematically under-weight the token. Venus `eth_call` on `BSC_RPC_URLS` (cl8y-dex-terraclassic#571) already proves the indexer can talk to BSC JSON-RPC. That path is **oracle-only** and must not be overloaded. Voting needs a **separate** BEP-20 ledger + EVM auth plane. --- ## Current codebase | Area | Status | |------|--------| | BSC JSON-RPC | `indexer/src/indexer/venus_vfdusd.rs` + `config.bsc_rpc_urls` (`BSC_RPC_URLS`) — **Venus vFDUSD `eth_call` only**. No `eth_getLogs`, no ERC-20 `balanceOf`, no Transfer parser | | Browser BSC | **Forbidden** for oracle (cl8y-dex-terraclassic#571 **V571-5**): no `VITE_*` BSC RPC, no BscScan from the dApp. Wallet *provider* connect for signing is a new surface | | EVM wallets in dApp | Cosmos-only: Keplr / Station / WC / Simulated Wallet (`frontend-dapp/src/services/terraclassic/wallet.ts`). WalletConnect is **EIP-155 Cosmos pairing** (cl8y-dex-terraclassic#519 / cl8y-dex-terraclassic#554 / cl8y-dex-terraclassic#566), not BSC | | Legal EVM sign | Hosted portal `https://terms.cl8y.com/sign/evm` (cl8y-dex-terraclassic#517 clickwrap) — **external redirect**, not in-app MetaMask; do not reuse as voting auth | | Voting ledger | **Not implemented** (cl8y-dex-terraclassic#509). Designed for CW20 wasm events only | | `operator-voting` | **Not implemented** (cl8y-dex-terraclassic#510). Designed for ADR-36 / Terra bech32 | | Frontend `/vote` | **Not implemented** (cl8y-dex-terraclassic#511). Designed for Terra `signArbitrary` | --- ## Constraints / guardrails 1. **Core, not phase-2.** Do not ship Terra-only voting to production as “done.” BSC registration + BEP-20 weight must land with (or immediately after) the Terra path; a Terra-only electorate is an incomplete product. 2. **No new contracts** on BSC or Terra. Do not deploy a voting token, snapshot contract, or governor. 3. **No BSC archive-node requirement.** Registration balance = live `balanceOf(wallet)` at current `eth_blockNumber`. History afterward = Transfer logs for the registered set only (mirror cl8y-dex-terraclassic#509). 4. **Pin the token.** Only trust logs/`balanceOf` for configured `BSC_CL8Y_TOKEN_ADDRESS` (default `0x8F452a1fdd388A45e1080992eFF051b4dd9048d2`). Ignore other BEP-20s and lookalike tickers. 5. **18-decimal** raw integer amounts as strings / `NUMERIC` — same as CW20; no float. 6. **Registered-set filter.** Index Transfer logs only when `from` or `to` is a registered EVM address (plus the registered counterparty). Do not ingest the full CL8Y holder universe. 7. **Reuse `BSC_RPC_URLS` transport, not the Venus module.** New indexer module (e.g. `bsc_cl8y_ledger.rs`). Empty `BSC_RPC_URLS` skips live BSC (CI/LocalTerra) the same way cl8y-dex-terraclassic#571 does. Never log RPC URLs/keys. Soft-fail RPC must not invent balances. 8. **Browser must not grow Vite BSC RPC hosts** for balance reads (keep **V571-5**). Indexer owns `eth_call` / `eth_getLogs`. Injected/WC provider is only for connect + `personal_sign`. 9. **Snapshot pairing.** A proposal freezes **both** a Terra Classic height (existing cl8y-dex-terraclassic#509) **and** a BSC block number taken at create time (wall-clock aligned). Vote weight for an address is the ledger balance on **its** chain at that chain’s frozen height/block. Document inclusive block ordering. 10. **Identity v1 = one address, one voter.** A Terra `terra1…` registration and a `0x…` registration are distinct voters unless product later adds explicit linking. Do not silently merge by heuristic. 11. **No double-count of the same units.** Terra CW20 and BSC BEP-20 are separately circulating supplies today (not a lock-and-mint bridge in this repo). Each registered address votes its chain balance. If an official bridge later locks tokens on one side, document so locked/in-flight supply is not counted twice. Do **not** convert via USD or DEX pool prices. 12. **Blacklist** (`VOTING_BLACKLIST_ADDRESSES`) must accept normalized `0x` (EIP-55 checksum optional; compare case-insensitive) **and** Terra bech32. 13. **Propose threshold (≥1000 CL8Y)** is evaluated against the **registering address’s** chain ledger (BEP-20 for EVM, CW20 for Terra). Do not sum unrelated addresses. 14. **Reorgs:** BSC reorg unwind/replay for registered EVM wallets; do not share tables with Venus `venus_vfdusd_rates`. 15. **Do not** use fee-discount tiers, `trader_positions`, or PancakeSwap LP as vote weight. 16. **Do not** break Cosmos WalletConnect mobile pairing (cl8y-dex-terraclassic#519 / cl8y-dex-terraclassic#554 / cl8y-dex-terraclassic#566) when adding EIP-155. --- ## Relevant files **Indexer / BSC I/O** - `indexer/src/config.rs` (`bsc_rpc_urls`) - `indexer/src/indexer/venus_vfdusd.rs` (RPC failover / `eth_call` pattern — **do not overload**) - `indexer/src/startup.rs`, `indexer/src/lcd/mod.rs` (Terra live balance analogue) - `indexer/migrations/`, `docs/indexer-invariants.md` - New: BEP-20 Transfer log parser + `balanceOf` registration ingest + BSC height/block cursor **operator-voting (cl8y-dex-terraclassic#510)** - New package: EIP-191 recover (`ecrecover` over `keccak256("\x19Ethereum Signed Message:\n" + len + message)`), chain-id / domain separation, EVM address normalize - Restricted SQL: `voting_bsc_cl8y_balance_at(wallet, block)` beside Terra `voting_cl8y_balance_at` **Frontend (cl8y-dex-terraclassic#511)** - `frontend-dapp/src/services/terraclassic/wallet.ts`, `hooks/useWallet.ts`, WalletConnect pairing stores (cl8y-dex-terraclassic#554) - `frontend-dapp/src/utils/legalClickwrap.ts` (Legal EVM portal is **not** voting) - New: EVM connect + `personal_sign` helper; `/vote` copy that Terra **or** BSC holders can register - Skills: `AGENTS_FRONTEND_WALLETCONNECT_MOBILE.md`, `AGENTS_FRONTEND_COPY_COGNITIVE_LOAD.md`, `AGENTS_INDEXER_VENUS_VFDUSD.md` (RPC hygiene) **Env / deploy** - `BSC_RPC_URLS` (existing), `BSC_CL8Y_TOKEN_ADDRESS`, Coolify indexer + `operator-voting` + frontend examples - `VITE_*` must not include BSC RPC URLs --- ## Recommended direction ### Indexer (extends #509) - Tables (illustrative): `voting_registrations` gains `chain` (`terra` \| `bsc`) + `address`; `cl8y_bep20_transfers` (bsc_block, tx_hash, log_index, from, to, amount); `cl8y_bsc_balances` checkpoints for `balance(wallet, bsc_block)` when `block >= registered_at_block`. - On EVM register: `eth_blockNumber` + `eth_call` `balanceOf(address)` on pinned CL8Y; persist; no historical `eth_getLogs` backfill unless explicitly designed (default **no backfill**, same as cl8y-dex-terraclassic#509). - Poll `eth_getLogs` for Transfer topic `0xddf252ad…` on the pinned token; filter to registered set; handle mint/burn (`from`/`to` zero address). - Cursor + reorg: store last processed BSC block; unwind like Terra `indexer_state`. ### operator-voting (extends #510) - Verify **either** ADR-36 (Terra) **or** EIP-191 (EVM) from payload `chain` / recovered address. - Proposal create records `{ terra_height, bsc_block, created_at }`. - Tally: Terra voters use CW20 ledger; EVM voters use BEP-20 ledger; never mix units into USD. - Blacklist + rate limits apply to both address formats. ### Frontend (extends #511) - Wallet modal: keep Terra connectors; add **BSC** (injected EIP-1193 + WalletConnect `eip155:56`). - Register / propose / vote: sign canonical bytes with the connected wallet’s scheme; show which chain’s CL8Y is counted. - Copy: registration is required **on the chain you hold** before a proposal you care about is created; do not imply on-chain DAO finality. - Simulated / test path: mocked EVM signer for vitest; do not require live MetaMask in CI. --- ## Acceptance criteria - [ ] Configurable pinned BEP-20 CL8Y address; indexer fails closed when the BSC voting feature is enabled and the address/RPC config is invalid. - [ ] Registering an EVM wallet stores live `balanceOf` + current BSC block; no archive/`debug_trace` requirement. - [ ] Subsequent BEP-20 Transfers to/from that wallet update the BSC ledger; unregistered EVM traffic is not stored (except as counterparty on a registered leg). - [ ] `balance(evm, B)` for `B >= registered_at_block` is reconstructible from the ledger; property/integration tested with fixtures (wiremock / Anvil — not live mainnet). - [ ] `operator-voting` accepts EIP-191 register / propose / vote from the recovered `0x` address; Terra ADR-36 path still works. - [ ] Proposal snapshot stores Terra height **and** BSC block; EVM vote weight uses the BSC ledger at that block (not tip). - [ ] Blacklist matches normalized EVM addresses; denylisted `0x` cannot vote or propose. - [ ] dApp can connect an EVM wallet and complete register → (optional) propose if ≥1000 BEP-20 CL8Y → vote. - [ ] Cosmos WalletConnect mobile flows (cl8y-dex-terraclassic#519 / cl8y-dex-terraclassic#554 / cl8y-dex-terraclassic#566) still pass. - [ ] No `VITE_*` BSC RPC; no Venus poller reuse; docs/invariants/Coolify env updated. - [ ] Linked cl8y-dex-terraclassic#509 / cl8y-dex-terraclassic#510 / cl8y-dex-terraclassic#511 describe BSC in-scope (this issue + comments). --- ## Test plan (all paths) 1. **Unit — log parser:** Transfer fixtures for pinned token; ignore other contracts; mint/burn; registered vs unregistered `from`/`to`. 2. **Unit — balance math:** sequential Transfers; self-transfer; 18-dec strings. 3. **Unit — EIP-191:** recover matches signer; rejects wrong length / `v` / replayed Terra payload. 4. **Integration — registration:** mock RPC `balanceOf` at block N; row matches. 5. **Integration — follow:** register A; A→B (B unregistered): A decreases, B not a voter; later B register is a new live snapshot (**no backfill**). 6. **Integration — snapshot:** transfers at B1,B2,B3; query at B2 returns post-B2; vote after sell still uses snapshot block. 7. **Cross-chain isolation:** Terra transfers do not change EVM weight and vice versa. 8. **Frontend:** EVM connect + sign happy path (mock provider); Terra path unchanged; disconnected / wrong-chain (not 56) errors. 9. **WC regression:** existing Cosmos WC unit tests still pass. 10. **Config:** empty `BSC_RPC_URLS` skips BSC ledger when feature optional in CI; production voting compose requires it. --- ## Test plan — attack, hack & abuse vectors 1. **Lookalike token:** Transfer logs from a fake CL8Y BEP-20 — must ignore. 2. **RPC spoof / SSRF:** `BSC_RPC_URLS` remains env-only (existing I389-18 class); do not take RPC URL from client. 3. **Signature cross-scheme:** Terra ADR-36 blob submitted as EVM vote (and reverse) — reject. 4. **Replay:** same EVM sig on another proposal / chain id / domain — reject. 5. **Checksum / case tricks:** `0xabc…` vs `0xAbC…` must be one wallet; blacklist bypass via case must fail. 6. **Unregistered log flood:** spam Transfers among unregistered EVM wallets — no unbounded rows. 7. **Flash move before snapshot:** large BEP-20 into a registered wallet — counted by design; document (same as cl8y-dex-terraclassic#509). 8. **Bridge double-count:** document current separately-circulating assumption; add a test note if a lock address is later excluded. 9. **Venus coupling:** BSC CL8Y indexer outage must not break vFDUSD oracle and vice versa. 10. **Phishing copy:** UI must not ask for EVM seed; only wallet popup sign. Do not send users to BscScan to “verify voting.” --- ## Verification criteria - [ ] Indexer unit + integration tests for BEP-20 ledger (Postgres; mocked BSC). - [ ] `operator-voting` tests for EIP-191 + mixed Terra/EVM blacklist + dual snapshot fields. - [ ] Frontend vitest for EVM gates / client; Cosmos WC tests still green. - [ ] Docs: `docs/indexer-invariants.md` + Coolify env; skill notes that voting BSC I/O ≠ Venus. - [ ] Manual or staging: MetaMask on BSC register + vote; Keplr Terra path still works. - [ ] Confirm production voting is not marked complete while BSC holders cannot participate. ## Labels `architecture` `backend` `frontend` `indexer` `enhancement` `security` `product` `UX` ## Priority P1 — **core electorate**. Majority of CL8Y is BEP-20 on BSC.
PlasticDigits commented 2026-08-21 11:32:37 +00:00 (Migrated from gitlab.com)

marked as related to cl8y-dex-terraclassic#509

marked as related to cl8y-dex-terraclassic#509
PlasticDigits commented 2026-08-21 11:32:38 +00:00 (Migrated from gitlab.com)

marked as related to cl8y-dex-terraclassic#510

marked as related to cl8y-dex-terraclassic#510
PlasticDigits commented 2026-08-21 11:32:38 +00:00 (Migrated from gitlab.com)

marked as related to cl8y-dex-terraclassic#511

marked as related to cl8y-dex-terraclassic#511
PlasticDigits commented 2026-08-21 11:32:48 +00:00 (Migrated from gitlab.com)

mentioned in issue cl8y-dex-terraclassic#509

mentioned in issue cl8y-dex-terraclassic#509
PlasticDigits commented 2026-08-21 11:32:50 +00:00 (Migrated from gitlab.com)

mentioned in issue cl8y-dex-terraclassic#510

mentioned in issue cl8y-dex-terraclassic#510
PlasticDigits commented 2026-08-21 11:32:52 +00:00 (Migrated from gitlab.com)

mentioned in issue cl8y-dex-terraclassic#511

mentioned in issue cl8y-dex-terraclassic#511
PlasticDigits commented 2026-08-25 06:07:36 +00:00 (Migrated from gitlab.com)

moved from cl8y-dex-terraclassic#588

moved from cl8y-dex-terraclassic#588
PlasticDigits commented 2026-08-25 06:07:55 +00:00 (Migrated from gitlab.com)

mentioned in issue #6

mentioned in issue #6
PlasticDigits commented 2026-08-25 06:07:59 +00:00 (Migrated from gitlab.com)

mentioned in issue #5

mentioned in issue #5
PlasticDigits commented 2026-08-25 06:08:30 +00:00 (Migrated from gitlab.com)

mentioned in issue #1

mentioned in issue #1
PlasticDigits commented 2026-08-25 06:08:41 +00:00 (Migrated from gitlab.com)

mentioned in issue #2

mentioned in issue #2
PlasticDigits commented 2026-08-25 06:08:42 +00:00 (Migrated from gitlab.com)

mentioned in issue #3

mentioned in issue #3
PlasticDigits commented 2026-08-25 06:08:44 +00:00 (Migrated from gitlab.com)

changed the description

changed the description
PlasticDigits commented 2026-08-25 06:08:47 +00:00 (Migrated from gitlab.com)

Repo split + updated links (2026-08-25)

Moved from cl8y-dex-terraclassic#588 to https://gitlab.com/PlasticDigits/voting/-/issues/4

BSC remains core electorate. EVM connect should follow the Bridge stack (#6), not a new wallet kit. Legal still applies to EVM wallets (#5).

Issue Role
#1 Terra and BSC ledgers
#2 ADR-36 and EIP-191
#3 Terra and EVM /vote
#4 (this) BSC integration contract
#5 Legal
#6 Wallets
## Repo split + updated links (2026-08-25) Moved from `cl8y-dex-terraclassic#588` to https://gitlab.com/PlasticDigits/voting/-/issues/4 BSC remains **core electorate**. EVM connect should follow the Bridge stack (**#6**), not a new wallet kit. Legal still applies to EVM wallets (**#5**). | Issue | Role | |-------|------| | **#1** | Terra **and** BSC ledgers | | **#2** | ADR-36 **and** EIP-191 | | **#3** | Terra **and** EVM `/vote` | | **#4** (this) | BSC integration contract | | **#5** | Legal | | **#6** | Wallets |
PlasticDigits commented 2026-08-25 06:08:52 +00:00 (Migrated from gitlab.com)

mentioned in issue cl8y-dex-terraclassic#588

mentioned in issue cl8y-dex-terraclassic#588
PlasticDigits commented 2026-08-25 06:08:59 +00:00 (Migrated from gitlab.com)

mentioned in issue cl8y-dex-terraclassic#637

mentioned in issue cl8y-dex-terraclassic#637
PlasticDigits commented 2026-08-25 06:09:13 +00:00 (Migrated from gitlab.com)

mentioned in commit 8d11152cfe

mentioned in commit 8d11152cfe841216c2aaa11931d8019030a502ee
PlasticDigits commented 2026-08-25 06:41:44 +00:00 (Migrated from gitlab.com)

mentioned in commit b32b56660d

mentioned in commit b32b56660d0df7b94c606187dda3a6130462c572
PlasticDigits commented 2026-08-25 06:41:53 +00:00 (Migrated from gitlab.com)

mentioned in merge request !18

mentioned in merge request !18
PlasticDigits commented 2026-08-25 06:42:01 +00:00 (Migrated from gitlab.com)

Implemented on feat/voting-bundle. MR: https://gitlab.com/PlasticDigits/voting/-/merge_requests/1
In-tree: ledger/ (CW20 + BEP-20), operator-voting/, frontend/ (/vote + Legal + ported wallets).
Docs: docs/LEDGER_INVARIANTS.md, docs/OPERATOR_VOTING.md, docs/FRONTEND.md.

Implemented on feat/voting-bundle. MR: https://gitlab.com/PlasticDigits/voting/-/merge_requests/1 In-tree: ledger/ (CW20 + BEP-20), operator-voting/, frontend/ (/vote + Legal + ported wallets). Docs: docs/LEDGER_INVARIANTS.md, docs/OPERATOR_VOTING.md, docs/FRONTEND.md.
PlasticDigits commented 2026-08-25 06:47:01 +00:00 (Migrated from gitlab.com)

mentioned in commit 8fe45a1974

mentioned in commit 8fe45a197400462abfc1724385113ea8276a028a
PlasticDigits (Migrated from gitlab.com) closed this issue 2026-08-25 06:47:01 +00:00
PlasticDigits commented 2026-08-25 06:47:48 +00:00 (Migrated from gitlab.com)

mentioned in issue #7

mentioned in issue #7
PlasticDigits commented 2026-08-25 06:48:22 +00:00 (Migrated from gitlab.com)

Merge verify (!18 → main, no conflicts). BSC ledger + EIP-191 + dual snapshot + Bridge-style EVM connect are on main. No VITE_* BSC RPC for balances.

Still open after merge (tracked in #7):

  • Staging MetaMask on BSC 56 register/vote after Legal.
  • Confirm production is not marked done until BSC holders can participate on a live deploy.
**Merge verify (!18 → main, no conflicts).** BSC ledger + EIP-191 + dual snapshot + Bridge-style EVM connect are on main. No `VITE_*` BSC RPC for balances. Still open after merge (tracked in #7): - Staging MetaMask on BSC 56 register/vote after Legal. - Confirm production is not marked done until BSC holders can participate on a live deploy.
PlasticDigits commented 2026-08-30 02:42:03 +00:00 (Migrated from gitlab.com)

mentioned in issue #12

mentioned in issue #12
PlasticDigits commented 2026-08-30 02:46:49 +00:00 (Migrated from gitlab.com)

mentioned in issue #13

mentioned in issue #13
PlasticDigits commented 2026-08-30 15:47:45 +00:00 (Migrated from gitlab.com)

mentioned in issue #16

mentioned in issue #16
Sign in to join this conversation.
No Branch/Tag specified
Branches Tags
main
fix/voting-36-43
No results found.
Labels
Clear labels   
architecture
Architecture

  
backend
API and services

  
deploy
Deploy

  
enhancement
Enhancement

  
frontend
Frontend

  
indexer
Indexer / ledger

  
product
Product

  
security
Security

  
UX
UX

No labels
architecture
backend
deploy
enhancement
frontend
indexer
product
security
UX
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
code/voting#4
No description provided.