Problem
There is no way to verify that a Stellar transaction recorded in the system was actually signed by a specific keypair. An attacker who knows a transaction hash could claim authorship without having signed it.
Proposed Solution
Create a SignatureVerificationService inside contract/module/signature/ that queries Stellar Horizon to verify transaction signers.
Acceptance Criteria
Problem
There is no way to verify that a Stellar transaction recorded in the system was actually signed by a specific keypair. An attacker who knows a transaction hash could claim authorship without having signed it.
Proposed Solution
Create a SignatureVerificationService inside
contract/module/signature/that queries Stellar Horizon to verify transaction signers.Acceptance Criteria