Files
Hanzo Dev 3678cccf5e refactor(bridge): remove dead custodial lock-mint gateway + MPC signer
The bridge package carried a full custodial lock-mint cross-chain bridge
(BridgeGateway: liquidity pools, daily limits, a 2/3 signer set) and an
in-memory MPC attestation layer (BridgeSigner) — neither wired to any
precompile address or Run dispatch, both guarding fund movement with STUB
verifiers (verifySignature / VerifyThresholdSignature returned
len(signature) > 0, accepting any non-empty bytes).

Cross-chain value movement is now the sole responsibility of the HTLC
atomic-swap precompile LP-90A0 (swap/), where every payout is backed by a
real transferFrom-observed lock and released only on a SHA-256 preimage or
timeout — non-custody is structural, not policy. Keeping a second, dormant
custodial path violated 'exactly one way' and left a mint surface that
could later be wired behind a fake verifier.

Removes gateway.go, signer.go, types.go and their tests; bridge/ is now a
pure chain registry (registrar precompile, registry rows — no fund
movement). No reachable code path changes: the deleted machinery was
depended on by nothing outside its own files (verified by build + grep).

go vet + go test -race ./bridge/... green; registry LP-90A0 intact.
2026-06-26 04:04:45 +00:00
..