diff --git a/.changeset/angry-lizards-hammer.md b/.changeset/angry-lizards-hammer.md new file mode 100644 index 00000000..1fb558b0 --- /dev/null +++ b/.changeset/angry-lizards-hammer.md @@ -0,0 +1,5 @@ +--- +"@farcaster/hubble": patch +--- + +Prevent connecting to peers not in allowed peer list diff --git a/apps/hubble/src/hubble.ts b/apps/hubble/src/hubble.ts index f09bc61e..75dce91d 100644 --- a/apps/hubble/src/hubble.ts +++ b/apps/hubble/src/hubble.ts @@ -946,6 +946,12 @@ export class Hub implements HubInterface { } async isValidPeer(ourPeerId: PeerId, message: ContactInfoContent) { + const peerId = ourPeerId.toString(); + if (MAINNET_ALLOWED_PEERS?.length && !MAINNET_ALLOWED_PEERS.includes(peerId)) { + log.warn(`Peer ${ourPeerId.toString()} is not in the allowed peers list`); + return false; + } + const theirVersion = message.hubVersion; const theirNetwork = message.network;