Fixed
[February 18, 2026] fix rental price feed signing with correct parcl_id
9 days ago by ReadMe API
v0.40.1
Fix Rental Price Feed Signing
- Fixed the
/v1/price_feed_rentals/latestendpoint to sign rental prices with the rental parcl_id (base + 2B offset) instead of the raw database parcl_id. This ensures the Ed25519 signature matches the on-chain rental price feed'sparcl_id, preventingEd25519MessageMismatcherrors during oracle price updates. - This also closes a cross-submission vulnerability where a sales-signed price could have been submitted to a rental price feed (or vice versa), since both previously used the same parcl_id in the signed message.