fix: check authorisation list for blocklisted address (#1898)

* check authorisation list for blocklisted address

* v1.5.3 release

* add changelog

* fix lint

Author: thomas-nguy

CHANGELOG.md

@@ -2,8 +2,13 @@
 
 ## UNRELEASED
 
+
 *Oct 30, 2025*
 
+## v1.5.3
+
+* [#1898](https://github.com/crypto-org-chain/cronos/pull/1898) Check authorisation list for blocklisted address.
+
 ## v1.5.2
 
 * [#1892](https://github.com/crypto-org-chain/cronos/pull/1892) fix: disable memiavl cache when optimistic execution is enabled.

app/block_address.go

@@ -4,6 +4,7 @@ import (
 	"fmt"
 
 	"github.com/crypto-org-chain/cronos/v2/x/cronos/types"
+	evmtypes "github.com/evmos/ethermint/x/evm/types"
 
 	"cosmossdk.io/errors"
 
@@ -41,6 +42,25 @@ func (bad BlockAddressesDecorator) AnteHandle(ctx sdk.Context, tx sdk.Tx, simula
 				}
 			}
 		}
+
+		// check EIP-7702 authorisation list
+		for _, msg := range tx.GetMsgs() {
+			msgEthTx, ok := msg.(*evmtypes.MsgEthereumTx)
+			if ok {
+				ethTx := msgEthTx.AsTransaction()
+				if ethTx.SetCodeAuthorizations() != nil {
+					for _, auth := range ethTx.SetCodeAuthorizations() {
+						addr, err := auth.Authority()
+						if err == nil {
+							if _, ok := bad.blockedMap[sdk.AccAddress(addr.Bytes()).String()]; ok {
+								return ctx, fmt.Errorf("signer is blocked: %s", addr.String())
+							}
+						}
+					}
+				}
+			}
+		}
+
 		admin := bad.getParams(ctx).CronosAdmin
 		for _, msg := range tx.GetMsgs() {
 			if blocklistMsg, ok := msg.(*types.MsgStoreBlockList); ok {

default.nix

@@ -11,7 +11,7 @@
   nativeByteOrder ? true, # nativeByteOrder mode will panic on big endian machines
 }:
 let
-  version = "v1.5.2";
+  version = "v1.5.3";
   pname = "cronosd";
   tags = [
     "ledger"