Developer builds keyless USDC deposit address, nearly derailed by 9,999-block RPC limit
A developer built a keyless crypto deposit system called Pigeonhole on Arc, Circle's L1 blockchain where USDC serves as the native currency for gas fees. Instead of generating private keys, the system uses Ethereum's CREATE2 opcode to deterministically derive deposit addresses, with funds swept to a treasury via a self-destructing contract in a single transaction. The project's entire payment-status logic relies on querying blockchain event logs, which exposed a critical flaw discovered the night before submission. Testing revealed that Arc's public RPC rejects log queries spanning 10,000 or more blocks, capping requests at 9,999 blocks — a limit that would have frozen invoice statuses within hours of deployment. The bug was caught during a pre-submission audit and subsequently fixed before the live version went public.
This is an AI-generated summary. ShortSingh links to the original source for the complete article.


Discussion (0)
Log in to join the discussion and vote.
Log in