Merge pull request #4115 from BitGo/BTC-683-add-decypt-check

feat(sdk-api): add check to see if the derived xpub matches
BitGo · Dec 4, 2023 · c23000f · c23000f
2 parents 637c214 + efef716
commit c23000f
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/modules/sdk-api/src/v1/wallet.ts b/modules/sdk-api/src/v1/wallet.ts
@@ -1719,6 +1719,10 @@ Wallet.prototype.getAndPrepareSigningKeychain = function (params, callback) {
       } catch (e) {
         throw new Error('Unable to decrypt user keychain');
       }
+
+      if (keychain.xpub && bip32.fromBase58(keychain.xprv).neutered().toBase58() !== keychain.xpub) {
+        throw new Error('derived xpub does not match stored xpub');
+      }
       return keychain;
     });
   }