fix: verify evm txid which return by custom rpc

packages/kit-bg/src/services/ServiceSend.ts

@@ -158,6 +158,19 @@ class ServiceSend extends ServiceBase {
         ...params,
         customRpcInfo,
       });
+
+      try {
+        const verified = await vault.verifyTxId({
+          txid: result.txid,
+          signedTx: result,
+        });
+        if (!verified) {
+          throw new Error('Invalid txid');
+        }
+      } catch (error) {
+        throw new Error('Invalid txid');
+      }
+
       txid = result.txid;
     }
 

packages/kit-bg/src/vaults/base/VaultBase.ts

@@ -1419,4 +1419,11 @@ export abstract class VaultBase extends VaultBaseChainOnly {
   ): Promise<IEncodedTx> {
     throw new NotImplemented();
   }
+
+  async verifyTxId(params: {
+    txid: string;
+    signedTx: ISignedTxPro;
+  }): Promise<boolean> {
+    return Promise.resolve(true);
+  }
 }

packages/kit-bg/src/vaults/impls/evm/Vault.ts

@@ -1232,13 +1232,29 @@ export default class Vault extends VaultBase {
     }
     const client = new ClientEvm(rpcUrl);
     const txid = await client.broadcastTransaction(signedTx.rawTx);
+
     return {
       ...signedTx,
       txid,
       encodedTx: signedTx.encodedTx,
     };
   }
 
+  override async verifyTxId(params: {
+    txid: string;
+    signedTx: ISignedTxPro;
+  }): Promise<boolean> {
+    const { signedTx, txid } = params;
+
+    if (typeof txid !== 'string') {
+      return false;
+    }
+
+    const recoveredTxid = ethers.utils.keccak256(signedTx.rawTx);
+
+    return recoveredTxid === txid;
+  }
+
   // RPC Client
   async getRpcClient() {
     const rpcInfo =