Reports

space-data-rig: what we found

burnVerify can't read payments sent as version 1 transactions.

Public since 2026-10-29. GitHub issue SpaceDataRig/space-data-rig/issues/13 was posted.

Code: SpaceDataRig/space-data-rig, their default branch on 2026-10-29. Reported to them: SpaceDataRig/space-data-rig/issues/13.

Status: Open: no fix merged yet

Findings

breaks money

burnVerify can't read payments sent as version 1 transactions

src/observe/burnVerify.ts (line 101) reads the payment with conn.getTransaction(signature, { maxSupportedTransactionVersion: 0 }). For a version 1 payment the RPC refuses it, the catch returns "could not read the payment transaction from the chain", and a real payment fails the check. src/solana/anchor-core.ts has the same cap.

Version 1 transactions are a large share of mainnet now (about 40% of non-vote transactions in a block I sampled; 115 of 332 in another), so this depends only on which wallet or SDK built the transaction.

  • src/observe/burnVerify.ts:101
  • src/solana/anchor-core.ts
getTransaction(<v1 signature>, { maxSupportedTransactionVersion: 0 })  -> error -32015 "Transaction version (1) is not supported by the requesting client"
getTransaction(<v1 signature>, { maxSupportedTransactionVersion: 1 })  -> the transaction (version 1, meta present)

Fix: maxSupportedTransactionVersion: 1 in both files.

What we measured

WhatResultHowChecked
Reported to themSpaceDataRig/space-data-rig/issues/13, posted 2026-10-29https://github.com/SpaceDataRig/space-data-rig/issues/13Oct 29, 2026, 3:05 PM UTC
StatusOpen: no fix merged yetGitHub issue SpaceDataRig/space-data-rig#13Oct 31, 2026, 1:55 AM UTC

Tools run on this project

Check it yourself

Every Pulse tool, live on mainnet, starting with tx_version. Paste any signature from this report, or your own.

Toolbox

Pick any tool, change any input, run it on mainnet, and reopen any call to change it and run it again.

Ctrl ↵ runs the tool

25/25 free, then $0.01

Run when code can't find or read a transaction that is on chain, or before relying on code that reads other people's transactions. Read the docs

Response

Run the request to see the live response. The inputs are real mainnet data, so it works as it is.

Your calls 0

Calls you run appear here and stay in this browser. Open one to change its inputs and run it again.