Add distribute rewards guard / auth

babylonlabs-io · Jan 29, 2025 · b7e7f7b · b7e7f7b
1 parent 749400c
commit b7e7f7b
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/contracts/btc-staking/src/staking.rs b/contracts/btc-staking/src/staking.rs
@@ -372,7 +372,10 @@ pub fn handle_distribute_rewards(
 ) -> Result<Vec<Event>, ContractError> {
     let config = CONFIG.load(deps.storage)?;
 
-    // TODO: Check that the sender is the finality contract (AML)
+    // Check that the sender is the finality contract (AML)
+    if info.sender != config.finality {
+        return Err(ContractError::Unauthorized);
+    }
 
     // Error if no proper funds to distribute
     let amount = must_pay(info, &config.denom)?;