Skip to content

docs(ops): make the deposit-enumeration pre-check trustworthy#126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
aliXsed merged 3 commits into from
Jul 31, 2026
Merged

docs(ops): make the deposit-enumeration pre-check trustworthy #126

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
07d0dc7
docs(ops): make the deposit-enumeration pre-check trustworthy
aliXsed Jul 31, 2026
65daa40
fix(spellcheck): allow RPC hostnames and Americanize Behaviour
aliXsed Jul 31, 2026
32c6d2d
Merge branch 'main' into docs/deposit-precheck-rpc-caveat
aliXsed Jul 31, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
5 changes: 4 additions & 1 deletion .cspell.json
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -171,6 +171,9 @@
"unstakes",
"Unstaked",
"funder",
"Fundings"
"Fundings",
"publicnode",
"drpc",
"apikey"
]
}
31 changes: 29 additions & 2 deletions ops/bridgehub-migration-cutover.md
View file
Open in desktop
Original file line numberDiff line numberDiff line change
Expand Up@@ -136,8 +136,35 @@ the deployer EOA holds nothing. The scripts print the required calldata; execute
- Rerun the fork suite and the canary (above).
- Enumerate old-bridge deposits (`DepositInitiated` events) and confirm every L2 tx executed
successfully — any that failed should be `claimFailedDeposit`-ed on the old bridge *before*
cutover, while it still has `MINTER_ROLE`. This needs an indexed RPC (Etherscan/Alchemy);
a 2M-block `eth_getLogs` range will not complete on a public endpoint.
cutover, while it still has `MINTER_ROLE`.

**This requires an authenticated archive endpoint, and a free one will lie to you.** The
bridge deployed at block 23579563, so any full-history scan is an archive request. Free
public endpoints reject those — but not always as an error you will notice:

| Endpoint | Behavior on an archive `eth_getLogs` |
| --- | --- |
| `ethereum-rpc.publicnode.com` | `-32602 Archive requests require a personal token`, which **`cast logs` reports as `[]` with exit 0** |
| `eth.drpc.org` | serves single requests, then `403` on sustained scanning |
| `cloudflare-eth.com`, `rpc.ankr.com/eth`, `eth.merkle.io` | internal error / unauthorized / method not found |

An empty result here is indistinguishable from "no deposits", and concluding the latter would
silently skip refundable failed deposits. Sanity-check any scan against a known-present log
before trusting a zero: block 23579563 must return the constructor's `OwnershipTransferred`
(`0x8be0079c...`). If it returns nothing, your endpoint is not answering — stop.

With an Etherscan key:

```bash
curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs\
&address=0x2D02b651Ea9630351719c8c55210e042e940d69a\
&topic0=0x5c8b4b222ae9120808577bfefeb97f913b4a7160435dcf81eb32a273dd41ad05\
&fromBlock=23579563&toBlock=latest&apikey=$ETHERSCAN_API_KEY" | jq '.result | length'
```

Then for each `l2DepositTxHash` (topic 1), check the L2 status via
`zks_getTransactionReceipt` on `https://mainnet.era.zksync.io`; anything failed or missing
needs `claimFailedDeposit` on the old bridge before it loses `MINTER_ROLE`.
- Confirm deployer funding: L1 deployment is ~1.4M gas, so budget **≥0.05 ETH** on L1 for
headroom against a gas spike mid-cutover, plus ~0.02 ETH on zkSync.
- Set `BRIDGEHUB`, `L2_CHAIN_ID=324`, `LEGACY_BRIDGE=0x2D02b651Ea9630351719c8c55210e042e940d69a`,
Expand Down
Loading
, 'i'); if (__m === '*' || __re.test(location.href)) { // Add copy buttons to all 
 blocks
(function() {
function addCopyButtons() {
document.querySelectorAll('pre code').forEach(function(codeBlock) {
if (codeBlock.parentElement.hasAttribute('data-copy-added')) return;
codeBlock.parentElement.setAttribute('data-copy-added', 'true');
var btn = document.createElement('button');
btn.textContent = 'Copy';
btn.style.cssText = 'position:absolute;top:4px;right:4px;padding:2px 8px;font-size:11px;background:#4ecdc4;border:none;border-radius:4px;color:#1a1a2e;cursor:pointer;opacity:0.7;transition:opacity 0.2s;';
btn.onmouseover = function() { this.style.opacity = '1'; };
btn.onmouseout = function() { this.style.opacity = '0.7'; };
btn.onclick = function() {
navigator.clipboard.writeText(codeBlock.textContent).then(function() {
btn.textContent = 'Copied!';
setTimeout(function() { btn.textContent = 'Copy'; }, 1500);
});
};
codeBlock.parentElement.style.position = 'relative';
codeBlock.parentElement.appendChild(btn);
});
}
addCopyButtons();
// Re-run on dynamic content
var observer = new MutationObserver(addCopyButtons);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Add Copy Buttons to Code Blocks]', __e); }
})();
(function(){
try {
var __m = "github.com";
var __re = new RegExp('^' + "github\\.com" + '
docs(ops): make the deposit-enumeration pre-check trustworthy by aliXsed · Pull Request #126 · NodleCode/rollup · GitHub
Skip to content
docs(ops): make the deposit-enumeration pre-check trustworthy#126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

aliXsed
merged 3 commits into

from

Jul 31, 2026
 Merged


docs(ops): make the deposit-enumeration pre-check trustworthy
#126
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
07d0dc7

docs(ops): make the deposit-enumeration pre-check trustworthy


aliXsed Jul 31, 2026
65daa40

fix(spellcheck): allow RPC hostnames and Americanize Behaviour


aliXsed Jul 31, 2026
32c6d2d

Merge branch 'main' into docs/deposit-precheck-rpc-caveat


aliXsed Jul 31, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


5 changes: 4 additions & 1 deletion
.cspell.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -171,6 +171,9 @@
 "unstakes",
 "Unstaked",
 "funder",
 "Fundings"
 "Fundings",
 "publicnode",
 "drpc",
 "apikey"
 ]
}

31 changes: 29 additions & 2 deletions
ops/bridgehub-migration-cutover.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -136,8 +136,35 @@ the deployer EOA holds nothing. The scripts print the required calldata; execute
 - Rerun the fork suite and the canary (above).
 - Enumerate old-bridge deposits (`DepositInitiated` events) and confirm every L2 tx executed
 successfully — any that failed should be `claimFailedDeposit`-ed on the old bridge *before*
 cutover, while it still has `MINTER_ROLE`. This needs an indexed RPC (Etherscan/Alchemy);
 a 2M-block `eth_getLogs` range will not complete on a public endpoint.
 cutover, while it still has `MINTER_ROLE`.

 **This requires an authenticated archive endpoint, and a free one will lie to you.** The
 bridge deployed at block 23579563, so any full-history scan is an archive request. Free
 public endpoints reject those — but not always as an error you will notice:

 | Endpoint | Behavior on an archive `eth_getLogs` |
 | --- | --- |
 | `ethereum-rpc.publicnode.com` | `-32602 Archive requests require a personal token`, which **`cast logs` reports as `[]` with exit 0** |
 | `eth.drpc.org` | serves single requests, then `403` on sustained scanning |
 | `cloudflare-eth.com`, `rpc.ankr.com/eth`, `eth.merkle.io` | internal error / unauthorized / method not found |

 An empty result here is indistinguishable from "no deposits", and concluding the latter would
 silently skip refundable failed deposits. Sanity-check any scan against a known-present log
 before trusting a zero: block 23579563 must return the constructor's `OwnershipTransferred`
 (`0x8be0079c...`). If it returns nothing, your endpoint is not answering — stop.

 With an Etherscan key:

 ```bash
 curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs\
&address=0x2D02b651Ea9630351719c8c55210e042e940d69a\
&topic0=0x5c8b4b222ae9120808577bfefeb97f913b4a7160435dcf81eb32a273dd41ad05\
&fromBlock=23579563&toBlock=latest&apikey=$ETHERSCAN_API_KEY" | jq '.result | length'
 ```

 Then for each `l2DepositTxHash` (topic 1), check the L2 status via
 `zks_getTransactionReceipt` on `https://mainnet.era.zksync.io`; anything failed or missing
 needs `claimFailedDeposit` on the old bridge before it loses `MINTER_ROLE`.
 - Confirm deployer funding: L1 deployment is ~1.4M gas, so budget **≥0.05 ETH** on L1 for
 headroom against a gas spike mid-cutover, plus ~0.02 ETH on zkSync.
 - Set `BRIDGEHUB`, `L2_CHAIN_ID=324`, `LEGACY_BRIDGE=0x2D02b651Ea9630351719c8c55210e042e940d69a`,
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Force GitHub README to respect dark mode
(function() {
var style = document.createElement('style');
style.textContent = '
.markdown-body {
color-scheme: dark light;
}
.markdown-body pre { background: #161b22 !important; }
.markdown-body code { background: rgba(110, 118, 129, 0.4) !important; }
.markdown-body table th, .markdown-body table td { border-color: #30363d !important; }
.markdown-body img { background: #0d1117; }
.markdown-body blockquote { border-left-color: #8b949e; }
.markdown-body hr { border-color: #30363d; }
';
document.head.appendChild(style);
})();
}
} catch(__e) { console.warn('[Userscript:GitHub Dark Mode README Fix]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
docs(ops): make the deposit-enumeration pre-check trustworthy by aliXsed · Pull Request #126 · NodleCode/rollup · GitHub
Skip to content
docs(ops): make the deposit-enumeration pre-check trustworthy#126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

aliXsed
merged 3 commits into

from

Jul 31, 2026
 Merged


docs(ops): make the deposit-enumeration pre-check trustworthy
#126
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
07d0dc7

docs(ops): make the deposit-enumeration pre-check trustworthy


aliXsed Jul 31, 2026
65daa40

fix(spellcheck): allow RPC hostnames and Americanize Behaviour


aliXsed Jul 31, 2026
32c6d2d

Merge branch 'main' into docs/deposit-precheck-rpc-caveat


aliXsed Jul 31, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


5 changes: 4 additions & 1 deletion
.cspell.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -171,6 +171,9 @@
 "unstakes",
 "Unstaked",
 "funder",
 "Fundings"
 "Fundings",
 "publicnode",
 "drpc",
 "apikey"
 ]
}

31 changes: 29 additions & 2 deletions
ops/bridgehub-migration-cutover.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -136,8 +136,35 @@ the deployer EOA holds nothing. The scripts print the required calldata; execute
 - Rerun the fork suite and the canary (above).
 - Enumerate old-bridge deposits (`DepositInitiated` events) and confirm every L2 tx executed
 successfully — any that failed should be `claimFailedDeposit`-ed on the old bridge *before*
 cutover, while it still has `MINTER_ROLE`. This needs an indexed RPC (Etherscan/Alchemy);
 a 2M-block `eth_getLogs` range will not complete on a public endpoint.
 cutover, while it still has `MINTER_ROLE`.

 **This requires an authenticated archive endpoint, and a free one will lie to you.** The
 bridge deployed at block 23579563, so any full-history scan is an archive request. Free
 public endpoints reject those — but not always as an error you will notice:

 | Endpoint | Behavior on an archive `eth_getLogs` |
 | --- | --- |
 | `ethereum-rpc.publicnode.com` | `-32602 Archive requests require a personal token`, which **`cast logs` reports as `[]` with exit 0** |
 | `eth.drpc.org` | serves single requests, then `403` on sustained scanning |
 | `cloudflare-eth.com`, `rpc.ankr.com/eth`, `eth.merkle.io` | internal error / unauthorized / method not found |

 An empty result here is indistinguishable from "no deposits", and concluding the latter would
 silently skip refundable failed deposits. Sanity-check any scan against a known-present log
 before trusting a zero: block 23579563 must return the constructor's `OwnershipTransferred`
 (`0x8be0079c...`). If it returns nothing, your endpoint is not answering — stop.

 With an Etherscan key:

 ```bash
 curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs\
&address=0x2D02b651Ea9630351719c8c55210e042e940d69a\
&topic0=0x5c8b4b222ae9120808577bfefeb97f913b4a7160435dcf81eb32a273dd41ad05\
&fromBlock=23579563&toBlock=latest&apikey=$ETHERSCAN_API_KEY" | jq '.result | length'
 ```

 Then for each `l2DepositTxHash` (topic 1), check the L2 status via
 `zks_getTransactionReceipt` on `https://mainnet.era.zksync.io`; anything failed or missing
 needs `claimFailedDeposit` on the old bridge before it loses `MINTER_ROLE`.
 - Confirm deployer funding: L1 deployment is ~1.4M gas, so budget **≥0.05 ETH** on L1 for
 headroom against a gas spike mid-cutover, plus ~0.02 ETH on zkSync.
 - Set `BRIDGEHUB`, `L2_CHAIN_ID=324`, `LEGACY_BRIDGE=0x2D02b651Ea9630351719c8c55210e042e940d69a`,
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Highlight search terms from Google/DuckDuckGo/Bing referrer
(function() {
var ref = document.referrer;
var terms = [];
if (ref.includes('google.com') || ref.includes('duckduckgo.com') || ref.includes('bing.com')) {
var url = new URL(ref);
var q = url.searchParams.get('q') || url.searchParams.get('p');
if (q) {
terms = q.split(/\s+/).filter(function(t) { return t.length > 2; });
}
}
if (terms.length === 0) return;
var style = document.createElement('style');
style.textContent = '.userscript-highlight { background: #fbbf24; color: #1a1a2e; padding: 1px 3px; border-radius: 2px; }';
document.head.appendChild(style);
function highlight(node) {
if (node.nodeType === 3) { // text node
var text = node.textContent;
var found = false;
terms.forEach(function(term) {
var regex = new RegExp('(' + term.replace(/[.*+?^${}()|[\]\\]/g, '\\') + ')', 'gi');
if (regex.test(text)) {
found = true;
var frag = document.createDocumentFragment();
var parts = text.split(regex);
parts.forEach(function(part, i) {
if (i % 2 === 0) {
frag.appendChild(document.createTextNode(part));
} else {
var span = document.createElement('span');
span.className = 'userscript-highlight';
span.textContent = part;
frag.appendChild(span);
}
});
node.parentNode.replaceChild(frag, node);
}
});
} else if (node.nodeType === 1 && node.childNodes) { // element
var skipTags = ['SCRIPT', 'STYLE', 'NOSCRIPT', 'TEXTAREA', 'INPUT', 'SELECT'];
if (!skipTags.includes(node.tagName)) {
Array.from(node.childNodes).forEach(highlight);
}
}
}
highlight(document.body);
// Re-highlight on dynamic content
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1 || node.nodeType === 3) highlight(node);
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Highlight Search Terms]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
docs(ops): make the deposit-enumeration pre-check trustworthy by aliXsed · Pull Request #126 · NodleCode/rollup · GitHub
Skip to content
docs(ops): make the deposit-enumeration pre-check trustworthy#126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

aliXsed
merged 3 commits into

from

Jul 31, 2026
 Merged


docs(ops): make the deposit-enumeration pre-check trustworthy
#126
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
07d0dc7

docs(ops): make the deposit-enumeration pre-check trustworthy


aliXsed Jul 31, 2026
65daa40

fix(spellcheck): allow RPC hostnames and Americanize Behaviour


aliXsed Jul 31, 2026
32c6d2d

Merge branch 'main' into docs/deposit-precheck-rpc-caveat


aliXsed Jul 31, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


5 changes: 4 additions & 1 deletion
.cspell.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -171,6 +171,9 @@
 "unstakes",
 "Unstaked",
 "funder",
 "Fundings"
 "Fundings",
 "publicnode",
 "drpc",
 "apikey"
 ]
}

31 changes: 29 additions & 2 deletions
ops/bridgehub-migration-cutover.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -136,8 +136,35 @@ the deployer EOA holds nothing. The scripts print the required calldata; execute
 - Rerun the fork suite and the canary (above).
 - Enumerate old-bridge deposits (`DepositInitiated` events) and confirm every L2 tx executed
 successfully — any that failed should be `claimFailedDeposit`-ed on the old bridge *before*
 cutover, while it still has `MINTER_ROLE`. This needs an indexed RPC (Etherscan/Alchemy);
 a 2M-block `eth_getLogs` range will not complete on a public endpoint.
 cutover, while it still has `MINTER_ROLE`.

 **This requires an authenticated archive endpoint, and a free one will lie to you.** The
 bridge deployed at block 23579563, so any full-history scan is an archive request. Free
 public endpoints reject those — but not always as an error you will notice:

 | Endpoint | Behavior on an archive `eth_getLogs` |
 | --- | --- |
 | `ethereum-rpc.publicnode.com` | `-32602 Archive requests require a personal token`, which **`cast logs` reports as `[]` with exit 0** |
 | `eth.drpc.org` | serves single requests, then `403` on sustained scanning |
 | `cloudflare-eth.com`, `rpc.ankr.com/eth`, `eth.merkle.io` | internal error / unauthorized / method not found |

 An empty result here is indistinguishable from "no deposits", and concluding the latter would
 silently skip refundable failed deposits. Sanity-check any scan against a known-present log
 before trusting a zero: block 23579563 must return the constructor's `OwnershipTransferred`
 (`0x8be0079c...`). If it returns nothing, your endpoint is not answering — stop.

 With an Etherscan key:

 ```bash
 curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs\
&address=0x2D02b651Ea9630351719c8c55210e042e940d69a\
&topic0=0x5c8b4b222ae9120808577bfefeb97f913b4a7160435dcf81eb32a273dd41ad05\
&fromBlock=23579563&toBlock=latest&apikey=$ETHERSCAN_API_KEY" | jq '.result | length'
 ```

 Then for each `l2DepositTxHash` (topic 1), check the L2 status via
 `zks_getTransactionReceipt` on `https://mainnet.era.zksync.io`; anything failed or missing
 needs `claimFailedDeposit` on the old bridge before it loses `MINTER_ROLE`.
 - Confirm deployer funding: L1 deployment is ~1.4M gas, so budget **≥0.05 ETH** on L1 for
 headroom against a gas spike mid-cutover, plus ~0.02 ETH on zkSync.
 - Set `BRIDGEHUB`, `L2_CHAIN_ID=324`, `LEGACY_BRIDGE=0x2D02b651Ea9630351719c8c55210e042e940d69a`,
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Strip utm_, fbclid, gclid, etc. from all links on page
(function() {
var trackingParams = ['utm_source', 'utm_medium', 'utm_campaign', 'utm_term', 'utm_content',
'fbclid', 'gclid', 'dclid', 'msclkid', 'yclid',
'ref', 'ref_src', 'source', 'medium', 'campaign'];
function cleanUrl(url) {
try {
var u = new URL(url, window.location.origin);
var changed = false;
trackingParams.forEach(function(p) {
if (u.searchParams.has(p)) {
u.searchParams.delete(p);
changed = true;
}
});
return changed ? u.toString() : url;
} catch (e) {
return url;
}
}
function cleanLinks() {
document.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
cleanLinks();
var observer = new MutationObserver(function(mutations) {
mutations.forEach(function(m) {
m.addedNodes.forEach(function(node) {
if (node.nodeType === 1) {
if (node.tagName === 'A') cleanLinks();
node.querySelectorAll('a[href]').forEach(function(a) {
var clean = cleanUrl(a.href);
if (clean !== a.href) a.href = clean;
});
}
});
});
});
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:Remove Tracking Parameters from Links]', __e); }
})();
(function(){
try {
var __m = "youtube.com";
var __re = new RegExp('^' + "youtube\\.com" + '
docs(ops): make the deposit-enumeration pre-check trustworthy by aliXsed · Pull Request #126 · NodleCode/rollup · GitHub
Skip to content
docs(ops): make the deposit-enumeration pre-check trustworthy#126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

aliXsed
merged 3 commits into

from

Jul 31, 2026
 Merged


docs(ops): make the deposit-enumeration pre-check trustworthy
#126
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
07d0dc7

docs(ops): make the deposit-enumeration pre-check trustworthy


aliXsed Jul 31, 2026
65daa40

fix(spellcheck): allow RPC hostnames and Americanize Behaviour


aliXsed Jul 31, 2026
32c6d2d

Merge branch 'main' into docs/deposit-precheck-rpc-caveat


aliXsed Jul 31, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


5 changes: 4 additions & 1 deletion
.cspell.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -171,6 +171,9 @@
 "unstakes",
 "Unstaked",
 "funder",
 "Fundings"
 "Fundings",
 "publicnode",
 "drpc",
 "apikey"
 ]
}

31 changes: 29 additions & 2 deletions
ops/bridgehub-migration-cutover.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -136,8 +136,35 @@ the deployer EOA holds nothing. The scripts print the required calldata; execute
 - Rerun the fork suite and the canary (above).
 - Enumerate old-bridge deposits (`DepositInitiated` events) and confirm every L2 tx executed
 successfully — any that failed should be `claimFailedDeposit`-ed on the old bridge *before*
 cutover, while it still has `MINTER_ROLE`. This needs an indexed RPC (Etherscan/Alchemy);
 a 2M-block `eth_getLogs` range will not complete on a public endpoint.
 cutover, while it still has `MINTER_ROLE`.

 **This requires an authenticated archive endpoint, and a free one will lie to you.** The
 bridge deployed at block 23579563, so any full-history scan is an archive request. Free
 public endpoints reject those — but not always as an error you will notice:

 | Endpoint | Behavior on an archive `eth_getLogs` |
 | --- | --- |
 | `ethereum-rpc.publicnode.com` | `-32602 Archive requests require a personal token`, which **`cast logs` reports as `[]` with exit 0** |
 | `eth.drpc.org` | serves single requests, then `403` on sustained scanning |
 | `cloudflare-eth.com`, `rpc.ankr.com/eth`, `eth.merkle.io` | internal error / unauthorized / method not found |

 An empty result here is indistinguishable from "no deposits", and concluding the latter would
 silently skip refundable failed deposits. Sanity-check any scan against a known-present log
 before trusting a zero: block 23579563 must return the constructor's `OwnershipTransferred`
 (`0x8be0079c...`). If it returns nothing, your endpoint is not answering — stop.

 With an Etherscan key:

 ```bash
 curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs\
&address=0x2D02b651Ea9630351719c8c55210e042e940d69a\
&topic0=0x5c8b4b222ae9120808577bfefeb97f913b4a7160435dcf81eb32a273dd41ad05\
&fromBlock=23579563&toBlock=latest&apikey=$ETHERSCAN_API_KEY" | jq '.result | length'
 ```

 Then for each `l2DepositTxHash` (topic 1), check the L2 status via
 `zks_getTransactionReceipt` on `https://mainnet.era.zksync.io`; anything failed or missing
 needs `claimFailedDeposit` on the old bridge before it loses `MINTER_ROLE`.
 - Confirm deployer funding: L1 deployment is ~1.4M gas, so budget **≥0.05 ETH** on L1 for
 headroom against a gas spike mid-cutover, plus ~0.02 ETH on zkSync.
 - Set `BRIDGEHUB`, `L2_CHAIN_ID=324`, `LEGACY_BRIDGE=0x2D02b651Ea9630351719c8c55210e042e940d69a`,
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Auto-enable theater mode on YouTube
(function() {
function tryTheater() {
var btn = document.querySelector('button[aria-label="Theater mode"], ytd-player #player button[title="Theater mode"]');
if (btn && !btn.classList.contains('activated')) {
btn.click();
}
}
// Try immediately
tryTheater();
// Try after navigation (SPA)
var lastUrl = location.href;
setInterval(function() {
if (location.href !== lastUrl) {
lastUrl = location.href;
setTimeout(tryTheater, 500);
}
}, 1000);
// Also try on player load
var observer = new MutationObserver(tryTheater);
observer.observe(document.body, { childList: true, subtree: true });
})();
}
} catch(__e) { console.warn('[Userscript:YouTube Theater Mode Default]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
docs(ops): make the deposit-enumeration pre-check trustworthy by aliXsed · Pull Request #126 · NodleCode/rollup · GitHub
Skip to content
docs(ops): make the deposit-enumeration pre-check trustworthy#126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

aliXsed
merged 3 commits into

from

Jul 31, 2026
 Merged


docs(ops): make the deposit-enumeration pre-check trustworthy
#126
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
07d0dc7

docs(ops): make the deposit-enumeration pre-check trustworthy


aliXsed Jul 31, 2026
65daa40

fix(spellcheck): allow RPC hostnames and Americanize Behaviour


aliXsed Jul 31, 2026
32c6d2d

Merge branch 'main' into docs/deposit-precheck-rpc-caveat


aliXsed Jul 31, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


5 changes: 4 additions & 1 deletion
.cspell.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -171,6 +171,9 @@
 "unstakes",
 "Unstaked",
 "funder",
 "Fundings"
 "Fundings",
 "publicnode",
 "drpc",
 "apikey"
 ]
}

31 changes: 29 additions & 2 deletions
ops/bridgehub-migration-cutover.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -136,8 +136,35 @@ the deployer EOA holds nothing. The scripts print the required calldata; execute
 - Rerun the fork suite and the canary (above).
 - Enumerate old-bridge deposits (`DepositInitiated` events) and confirm every L2 tx executed
 successfully — any that failed should be `claimFailedDeposit`-ed on the old bridge *before*
 cutover, while it still has `MINTER_ROLE`. This needs an indexed RPC (Etherscan/Alchemy);
 a 2M-block `eth_getLogs` range will not complete on a public endpoint.
 cutover, while it still has `MINTER_ROLE`.

 **This requires an authenticated archive endpoint, and a free one will lie to you.** The
 bridge deployed at block 23579563, so any full-history scan is an archive request. Free
 public endpoints reject those — but not always as an error you will notice:

 | Endpoint | Behavior on an archive `eth_getLogs` |
 | --- | --- |
 | `ethereum-rpc.publicnode.com` | `-32602 Archive requests require a personal token`, which **`cast logs` reports as `[]` with exit 0** |
 | `eth.drpc.org` | serves single requests, then `403` on sustained scanning |
 | `cloudflare-eth.com`, `rpc.ankr.com/eth`, `eth.merkle.io` | internal error / unauthorized / method not found |

 An empty result here is indistinguishable from "no deposits", and concluding the latter would
 silently skip refundable failed deposits. Sanity-check any scan against a known-present log
 before trusting a zero: block 23579563 must return the constructor's `OwnershipTransferred`
 (`0x8be0079c...`). If it returns nothing, your endpoint is not answering — stop.

 With an Etherscan key:

 ```bash
 curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs\
&address=0x2D02b651Ea9630351719c8c55210e042e940d69a\
&topic0=0x5c8b4b222ae9120808577bfefeb97f913b4a7160435dcf81eb32a273dd41ad05\
&fromBlock=23579563&toBlock=latest&apikey=$ETHERSCAN_API_KEY" | jq '.result | length'
 ```

 Then for each `l2DepositTxHash` (topic 1), check the L2 status via
 `zks_getTransactionReceipt` on `https://mainnet.era.zksync.io`; anything failed or missing
 needs `claimFailedDeposit` on the old bridge before it loses `MINTER_ROLE`.
 - Confirm deployer funding: L1 deployment is ~1.4M gas, so budget **≥0.05 ETH** on L1 for
 headroom against a gas spike mid-cutover, plus ~0.02 ETH on zkSync.
 - Set `BRIDGEHUB`, `L2_CHAIN_ID=324`, `LEGACY_BRIDGE=0x2D02b651Ea9630351719c8c55210e042e940d69a`,
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Remove or un-stick sticky/fixed headers that block content
(function() {
function unstick() {
document.querySelectorAll('header, nav, [role="banner"], .header, .navbar, .sticky, .fixed-top, [style*="position: fixed"], [style*="position:sticky"]').forEach(function(el) {
if (el.style.position === 'fixed' || el.style.position === 'sticky' || getComputedStyle(el).position === 'fixed' || getComputedStyle(el).position === 'sticky') {
el.style.position = 'static';
el.style.top = 'auto';
el.style.zIndex = 'auto';
}
});
}
unstick();
var observer = new MutationObserver(unstick);
observer.observe(document.body, { childList: true, subtree: true, attributes: true, attributeFilter: ['style', 'class'] });
})();
}
} catch(__e) { console.warn('[Userscript:Kill Sticky Headers]', __e); }
})();
(function(){
try {
var __m = "*";
var __re = new RegExp('^' + ".*" + '
docs(ops): make the deposit-enumeration pre-check trustworthy by aliXsed · Pull Request #126 · NodleCode/rollup · GitHub
Skip to content
docs(ops): make the deposit-enumeration pre-check trustworthy#126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

aliXsed
merged 3 commits into

from

Jul 31, 2026
 Merged


docs(ops): make the deposit-enumeration pre-check trustworthy
#126
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
07d0dc7

docs(ops): make the deposit-enumeration pre-check trustworthy


aliXsed Jul 31, 2026
65daa40

fix(spellcheck): allow RPC hostnames and Americanize Behaviour


aliXsed Jul 31, 2026
32c6d2d

Merge branch 'main' into docs/deposit-precheck-rpc-caveat


aliXsed Jul 31, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


5 changes: 4 additions & 1 deletion
.cspell.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -171,6 +171,9 @@
 "unstakes",
 "Unstaked",
 "funder",
 "Fundings"
 "Fundings",
 "publicnode",
 "drpc",
 "apikey"
 ]
}

31 changes: 29 additions & 2 deletions
ops/bridgehub-migration-cutover.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -136,8 +136,35 @@ the deployer EOA holds nothing. The scripts print the required calldata; execute
 - Rerun the fork suite and the canary (above).
 - Enumerate old-bridge deposits (`DepositInitiated` events) and confirm every L2 tx executed
 successfully — any that failed should be `claimFailedDeposit`-ed on the old bridge *before*
 cutover, while it still has `MINTER_ROLE`. This needs an indexed RPC (Etherscan/Alchemy);
 a 2M-block `eth_getLogs` range will not complete on a public endpoint.
 cutover, while it still has `MINTER_ROLE`.

 **This requires an authenticated archive endpoint, and a free one will lie to you.** The
 bridge deployed at block 23579563, so any full-history scan is an archive request. Free
 public endpoints reject those — but not always as an error you will notice:

 | Endpoint | Behavior on an archive `eth_getLogs` |
 | --- | --- |
 | `ethereum-rpc.publicnode.com` | `-32602 Archive requests require a personal token`, which **`cast logs` reports as `[]` with exit 0** |
 | `eth.drpc.org` | serves single requests, then `403` on sustained scanning |
 | `cloudflare-eth.com`, `rpc.ankr.com/eth`, `eth.merkle.io` | internal error / unauthorized / method not found |

 An empty result here is indistinguishable from "no deposits", and concluding the latter would
 silently skip refundable failed deposits. Sanity-check any scan against a known-present log
 before trusting a zero: block 23579563 must return the constructor's `OwnershipTransferred`
 (`0x8be0079c...`). If it returns nothing, your endpoint is not answering — stop.

 With an Etherscan key:

 ```bash
 curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs\
&address=0x2D02b651Ea9630351719c8c55210e042e940d69a\
&topic0=0x5c8b4b222ae9120808577bfefeb97f913b4a7160435dcf81eb32a273dd41ad05\
&fromBlock=23579563&toBlock=latest&apikey=$ETHERSCAN_API_KEY" | jq '.result | length'
 ```

 Then for each `l2DepositTxHash` (topic 1), check the L2 status via
 `zks_getTransactionReceipt` on `https://mainnet.era.zksync.io`; anything failed or missing
 needs `claimFailedDeposit` on the old bridge before it loses `MINTER_ROLE`.
 - Confirm deployer funding: L1 deployment is ~1.4M gas, so budget **≥0.05 ETH** on L1 for
 headroom against a gas spike mid-cutover, plus ~0.02 ETH on zkSync.
 - Set `BRIDGEHUB`, `L2_CHAIN_ID=324`, `LEGACY_BRIDGE=0x2D02b651Ea9630351719c8c55210e042e940d69a`,
Expand Down
Loading

, 'i');
if (__m === '*' || __re.test(location.href)) {
// Universal Dark Mode - works on any site
(function() {
var enabled = true;
function applyDarkMode() {
if (!enabled) return;
// Create style element if it doesn't exist
var style = document.getElementById('universal-dark-mode-style');
if (!style) {
style = document.createElement('style');
style.id = 'universal-dark-mode-style';
document.head.appendChild(style);
}
// Dark mode CSS - inverts colors but preserves images/video
style.textContent = '
/* Invert everything except media */
html {
filter: invert(1) hue-rotate(180deg) !important;
background: #1a1a2e !important;
}
/* Restore images, videos, iframes, canvas */
img, video, iframe, canvas, svg, picture, [style*="background-image"] {
filter: invert(1) hue-rotate(180deg) !important;
}
/* Preserve specific elements that should not be inverted */
.no-dark-mode, .no-dark-mode *,
[data-theme="light"], [data-theme="light"],
.ace_editor, .ace_editor *,
.CodeMirror, .CodeMirror *,
.monaco-editor, .monaco-editor *,
.markdown-body pre, .markdown-body pre *,
.highlight, .highlight *,
pre code, pre code * {
filter: none !important;
}
/* Fix common UI elements */
.modal, .popup, .dropdown-menu, .tooltip, .popover {
filter: invert(1) hue-rotate(180deg) !important;
background: #2d2d44 !important;
border-color: #444 !important;
}
/* Scrollbars */
::-webkit-scrollbar { background: #1a1a2e !important; }
::-webkit-scrollbar-thumb { background: #444 !important; }
::-webkit-scrollbar-thumb:hover { background: #555 !important; }
/* Selection */
::selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
::-moz-selection { background: #4ecdc4 !important; color: #1a1a2e !important; }
';
}
function removeDarkMode() {
var style = document.getElementById('universal-dark-mode-style');
if (style) style.remove();
}
// Toggle with Alt+Shift+D
document.addEventListener('keydown', function(e) {
if (e.altKey && e.shiftKey && e.key === 'D') {
e.preventDefault();
enabled = !enabled;
if (enabled) {
applyDarkMode();
console.log('[Universal Dark Mode] Enabled');
} else {
removeDarkMode();
console.log('[Universal Dark Mode] Disabled');
}
}
});
// Apply on load
applyDarkMode();
// Re-apply on dynamic content
var observer = new MutationObserver(function(mutations) {
if (enabled && !document.getElementById('universal-dark-mode-style')) {
applyDarkMode();
}
});
observer.observe(document.head, { childList: true });
console.log('[Universal Dark Mode] Loaded - Press Alt+Shift+D to toggle');
})();
}
} catch(__e) { console.warn('[Userscript:Universal Dark Mode]', __e); }
})();
})();
docs(ops): make the deposit-enumeration pre-check trustworthy by aliXsed · Pull Request #126 · NodleCode/rollup · GitHub
Skip to content
docs(ops): make the deposit-enumeration pre-check trustworthy#126

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

 Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and
privacy statement. We’ll occasionally send you account related emails.

Already on GitHub?
Sign in
to your account

 Merged

aliXsed
merged 3 commits into

from

Jul 31, 2026
 Merged


docs(ops): make the deposit-enumeration pre-check trustworthy
#126
Show file tree
Hide file tree
 Changes from all commits
Commits

Show all changes


3 commits


Select commit
Hold shift + click to select a range
07d0dc7

docs(ops): make the deposit-enumeration pre-check trustworthy


aliXsed Jul 31, 2026
65daa40

fix(spellcheck): allow RPC hostnames and Americanize Behaviour


aliXsed Jul 31, 2026
32c6d2d

Merge branch 'main' into docs/deposit-precheck-rpc-caveat


aliXsed Jul 31, 2026

File filter

Filter by extension
Filter by extension
Conversations

Failed to load comments. 
Loading
Jump to

Jump to file


Failed to load files. 
Loading
 Diff view

 Diff view


5 changes: 4 additions & 1 deletion
.cspell.json

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -171,6 +171,9 @@
 "unstakes",
 "Unstaked",
 "funder",
 "Fundings"
 "Fundings",
 "publicnode",
 "drpc",
 "apikey"
 ]
}

31 changes: 29 additions & 2 deletions
ops/bridgehub-migration-cutover.md

View file


Open in desktop

Original file line numberDiff line numberDiff line change
Expand Up@@ -136,8 +136,35 @@ the deployer EOA holds nothing. The scripts print the required calldata; execute
 - Rerun the fork suite and the canary (above).
 - Enumerate old-bridge deposits (`DepositInitiated` events) and confirm every L2 tx executed
 successfully — any that failed should be `claimFailedDeposit`-ed on the old bridge *before*
 cutover, while it still has `MINTER_ROLE`. This needs an indexed RPC (Etherscan/Alchemy);
 a 2M-block `eth_getLogs` range will not complete on a public endpoint.
 cutover, while it still has `MINTER_ROLE`.

 **This requires an authenticated archive endpoint, and a free one will lie to you.** The
 bridge deployed at block 23579563, so any full-history scan is an archive request. Free
 public endpoints reject those — but not always as an error you will notice:

 | Endpoint | Behavior on an archive `eth_getLogs` |
 | --- | --- |
 | `ethereum-rpc.publicnode.com` | `-32602 Archive requests require a personal token`, which **`cast logs` reports as `[]` with exit 0** |
 | `eth.drpc.org` | serves single requests, then `403` on sustained scanning |
 | `cloudflare-eth.com`, `rpc.ankr.com/eth`, `eth.merkle.io` | internal error / unauthorized / method not found |

 An empty result here is indistinguishable from "no deposits", and concluding the latter would
 silently skip refundable failed deposits. Sanity-check any scan against a known-present log
 before trusting a zero: block 23579563 must return the constructor's `OwnershipTransferred`
 (`0x8be0079c...`). If it returns nothing, your endpoint is not answering — stop.

 With an Etherscan key:

 ```bash
 curl -s "https://api.etherscan.io/v2/api?chainid=1&module=logs&action=getLogs\
&address=0x2D02b651Ea9630351719c8c55210e042e940d69a\
&topic0=0x5c8b4b222ae9120808577bfefeb97f913b4a7160435dcf81eb32a273dd41ad05\
&fromBlock=23579563&toBlock=latest&apikey=$ETHERSCAN_API_KEY" | jq '.result | length'
 ```

 Then for each `l2DepositTxHash` (topic 1), check the L2 status via
 `zks_getTransactionReceipt` on `https://mainnet.era.zksync.io`; anything failed or missing
 needs `claimFailedDeposit` on the old bridge before it loses `MINTER_ROLE`.
 - Confirm deployer funding: L1 deployment is ~1.4M gas, so budget **≥0.05 ETH** on L1 for
 headroom against a gas spike mid-cutover, plus ~0.02 ETH on zkSync.
 - Set `BRIDGEHUB`, `L2_CHAIN_ID=324`, `LEGACY_BRIDGE=0x2D02b651Ea9630351719c8c55210e042e940d69a`,
Expand Down
Loading