fix(sigmap-audit): Add precursor invariants to EigenDA entrypoint

.github/workflows/audit-ci.yml

@@ -12,7 +12,7 @@ on:
 jobs:
   install:
     name: 'Install'
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     strategy:
       matrix:
         node-version: [18, 20]
@@ -30,7 +30,7 @@ jobs:
 
   yarn-audit:
     name: Audit
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     needs: install
     steps:
       - name: Checkout

.github/workflows/base-branch-check.yml

@@ -7,7 +7,7 @@ on:
 jobs:
   base_branch_check:
     name: Pull request base branch check
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     steps:
       - name: Check the pull request base branch
         run: |

.github/workflows/contract-tests.yml

@@ -12,7 +12,7 @@ on:
 jobs:
   test-unit:
     name: Test unit
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     steps:
       - uses: actions/checkout@v3
         with:
@@ -112,7 +112,7 @@ jobs:
           token: ${{ secrets.CODECOV_TOKEN }}
   test-4844:
     name: 4844 tests
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     steps:
       - uses: actions/checkout@v3
         with:
@@ -125,7 +125,6 @@ jobs:
 
       - uses: Layr-Labs/arbitrum-actions/run-nitro-test-node@main
         with:
-          nitro-testnode-ref: deneb-integration
           args: --pos
           no-token-bridge: true
 
@@ -146,7 +145,7 @@ jobs:
         run: yarn test:4844
   test-e2e:
     name: Test e2e
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     steps:
       - uses: actions/checkout@v3
         with:
@@ -176,7 +175,7 @@ jobs:
         run: yarn test:e2e
   test-e2e-custom-fee-token:
     name: Test e2e custom fee token
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     steps:
       - uses: actions/checkout@v3
         with:
@@ -207,7 +206,7 @@ jobs:
         run: yarn test:e2e
   test-e2e-fee-token-6-decimals:
     name: Test e2e fee token with 6 decimals
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     steps:
       - uses: actions/checkout@v3
         with:

.github/workflows/slither.yml

@@ -6,7 +6,7 @@ on:
 
 jobs:
   analyze:
-    runs-on: ubuntu-latest
+    runs-on: linux-2xl
     steps:
       - uses: actions/checkout@v4
 

src/bridge/SequencerInbox.sol

@@ -8,6 +8,7 @@ import {
     AlreadyInit,
     HadZeroInit,
     BadPostUpgradeInit,
+    NotEOA,
     NotOrigin,
     DataTooLarge,
     DelayedBackwards,
@@ -479,7 +480,9 @@ contract SequencerInbox is DelegateCallAware, GasRefundEnabled, ISequencerInbox
         uint256 prevMessageCount,
         uint256 newMessageCount
     ) external refundsGas(gasRefunder, IReader4844(address(0))) {
+        if(msg.sender != tx.origin) revert NotOrigin();
         if (!isBatchPoster[msg.sender]) revert NotBatchPoster();
+        if (address(msg.sender).code.length > 0) revert NotEOA();
         // Verify that the blob was actually included before continuing
         eigenDARollupManager.verifyBlob(cert.blobHeader, cert.blobVerificationProof);
         // Form the EigenDA data hash and get the time bounds

src/libraries/Error.sol

@@ -158,6 +158,9 @@ error IncorrectMessagePreimage();
 /// @dev This can only be called by the batch poster
 error NotBatchPoster();
 
+/// @dev This can only be called by an EOA account without EIP-7702 enabled
+error NotEOA();
+
 /// @dev The sequence number provided to this message was inconsistent with the number of batches already included
 error BadSequencerNumber(uint256 stored, uint256 received);