SDK update + audit fixes (#316)

* fix(audit): liquid vesting - check funder account

---------

Co-authored-by: Petr Ivanov <petr.ivanov@tendermint.com>
Co-authored-by: Evgeniy Abramov <i@kio.ninja>

README.md

@@ -18,7 +18,7 @@ Ethereum compatibility is done using modules built by [Tharsis](https://thars.is
 
 Haqq Network’s Shariah-compliant native currency is ISLM – [Fatwa]([https://islamiccoin.net/fatwa](https://islamiccoin.net/shariah)).
 
-**Note**: Requires [Go 1.20+](https://golang.org/dl)
+**Note**: Requires [Go 1.21+](https://golang.org/dl)
 
 ## Installation
 

go.mod

@@ -6,14 +6,14 @@ toolchain go1.21.9
 
 require (
  cosmossdk.io/api v0.3.1
- cosmossdk.io/errors v1.0.0
- cosmossdk.io/math v1.1.2
+ cosmossdk.io/errors v1.0.1
+ cosmossdk.io/math v1.2.0
  cosmossdk.io/simapp v0.0.0-20230608160436-666c345ad23d
  cosmossdk.io/tools/rosetta v0.2.1
  github.com/armon/go-metrics v0.4.1
  github.com/btcsuite/btcd v0.23.4
  github.com/btcsuite/btcd/btcutil v1.1.3
- github.com/cometbft/cometbft v0.37.3
+ github.com/cometbft/cometbft v0.37.4
  github.com/cometbft/cometbft-db v0.8.0
  github.com/cosmos/cosmos-proto v1.0.0-beta.2
  github.com/cosmos/cosmos-sdk v0.47.5
@@ -43,25 +43,25 @@ require (
  github.com/tidwall/gjson v1.14.0
  github.com/tidwall/sjson v1.2.4
  github.com/tyler-smith/go-bip39 v1.1.0
- github.com/zondax/hid v0.9.1
+ github.com/zondax/hid v0.9.2
  go.opencensus.io v0.24.0
- golang.org/x/net v0.18.0
+ golang.org/x/net v0.19.0
  golang.org/x/text v0.14.0
- google.golang.org/genproto/googleapis/api v0.0.0-20230711160842-782d3b101e98
- google.golang.org/grpc v1.58.3
- google.golang.org/protobuf v1.31.0
+ google.golang.org/genproto/googleapis/api v0.0.0-20231212172506-995d672761c0
+ google.golang.org/grpc v1.60.1
+ google.golang.org/protobuf v1.32.0
  sigs.k8s.io/yaml v1.3.0
 )
 
 require (
- cloud.google.com/go v0.110.4 // indirect
- cloud.google.com/go/compute v1.21.0 // indirect
+ cloud.google.com/go v0.111.0 // indirect
+ cloud.google.com/go/compute v1.23.3 // indirect
  cloud.google.com/go/compute/metadata v0.2.3 // indirect
- cloud.google.com/go/iam v1.1.1 // indirect
+ cloud.google.com/go/iam v1.1.5 // indirect
  cloud.google.com/go/storage v1.30.1 // indirect
  cosmossdk.io/core v0.5.1 // indirect
  cosmossdk.io/depinject v1.0.0-alpha.4 // indirect
- cosmossdk.io/log v1.2.1 // indirect
+ cosmossdk.io/log v1.3.0 // indirect
  filippo.io/edwards25519 v1.0.0 // indirect
  github.com/99designs/go-keychain v0.0.0-20191008050251-8e49817e8af4 // indirect
  github.com/99designs/keyring v1.2.1 // indirect
@@ -91,9 +91,9 @@ require (
  github.com/containerd/continuity v0.3.0 // indirect
  github.com/cosmos/btcutil v1.0.5 // indirect
  github.com/cosmos/gogogateway v1.2.0 // indirect
- github.com/cosmos/iavl v0.20.0 // indirect
+ github.com/cosmos/iavl v0.20.1 // indirect
  github.com/cosmos/ics23/go v0.10.0 // indirect
- github.com/cosmos/ledger-cosmos-go v0.12.2 // indirect
+ github.com/cosmos/ledger-cosmos-go v0.12.4 // indirect
  github.com/cosmos/rosetta-sdk-go v0.10.0 // indirect
  github.com/creachadair/taskgroup v0.4.2 // indirect
  github.com/danieljoos/wincred v1.1.2 // indirect
@@ -119,26 +119,27 @@ require (
  github.com/go-kit/kit v0.12.0 // indirect
  github.com/go-kit/log v0.2.1 // indirect
  github.com/go-logfmt/logfmt v0.6.0 // indirect
- github.com/go-logr/logr v1.2.3 // indirect
+ github.com/go-logr/logr v1.2.4 // indirect
+ github.com/go-logr/stdr v1.2.2 // indirect
  github.com/go-ole/go-ole v1.2.6 // indirect
  github.com/go-sourcemap/sourcemap v2.1.3+incompatible // indirect
  github.com/go-stack/stack v1.8.0 // indirect
  github.com/go-task/slim-sprig v0.0.0-20210107165309-348f09dbbbc0 // indirect
  github.com/godbus/dbus v0.0.0-20190726142602-4481cbc300e2 // indirect
  github.com/gogo/googleapis v1.4.1 // indirect
- github.com/golang/glog v1.1.0 // indirect
+ github.com/golang/glog v1.1.2 // indirect
  github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
  github.com/golang/mock v1.6.0 // indirect
  github.com/golang/snappy v0.0.4 // indirect
  github.com/google/btree v1.1.2 // indirect
- github.com/google/go-cmp v0.5.9 // indirect
+ github.com/google/go-cmp v0.6.0 // indirect
  github.com/google/orderedcode v0.0.1 // indirect
  github.com/google/pprof v0.0.0-20210720184732-4bb14d4b1be1 // indirect
- github.com/google/s2a-go v0.1.4 // indirect
+ github.com/google/s2a-go v0.1.7 // indirect
  github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
- github.com/google/uuid v1.3.0 // indirect
- github.com/googleapis/enterprise-certificate-proxy v0.2.3 // indirect
- github.com/googleapis/gax-go/v2 v2.11.0 // indirect
+ github.com/google/uuid v1.4.0 // indirect
+ github.com/googleapis/enterprise-certificate-proxy v0.3.2 // indirect
+ github.com/googleapis/gax-go/v2 v2.12.0 // indirect
  github.com/gorilla/handlers v1.5.1 // indirect
  github.com/grpc-ecosystem/go-grpc-middleware v1.3.0 // indirect
  github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c // indirect
@@ -161,7 +162,7 @@ require (
  github.com/jackpal/go-nat-pmp v1.0.2 // indirect
  github.com/jmespath/go-jmespath v0.4.0 // indirect
  github.com/jmhodges/levigo v1.0.0 // indirect
- github.com/klauspost/compress v1.16.3 // indirect
+ github.com/klauspost/compress v1.16.7 // indirect
  github.com/kr/pretty v0.3.1 // indirect
  github.com/kr/text v0.2.0 // indirect
  github.com/lib/pq v1.10.7 // indirect
@@ -170,7 +171,7 @@ require (
  github.com/magiconair/properties v1.8.7 // indirect
  github.com/manifoldco/promptui v0.9.0 // indirect
  github.com/mattn/go-colorable v0.1.13 // indirect
- github.com/mattn/go-isatty v0.0.19 // indirect
+ github.com/mattn/go-isatty v0.0.20 // indirect
  github.com/mattn/go-runewidth v0.0.9 // indirect
  github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
  github.com/mimoo/StrobeGo v0.0.0-20210601165009-122bf33a46e0 // indirect
@@ -196,7 +197,7 @@ require (
  github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475 // indirect
  github.com/rjeczalik/notify v0.9.2 // indirect
  github.com/rogpeppe/go-internal v1.11.0 // indirect
- github.com/rs/zerolog v1.30.0 // indirect
+ github.com/rs/zerolog v1.31.0 // indirect
  github.com/sasha-s/go-deadlock v0.3.1 // indirect
  github.com/shirou/gopsutil v3.21.4-0.20210419000835-c7a38de76ee5+incompatible // indirect
  github.com/sirupsen/logrus v1.9.0 // indirect
@@ -217,21 +218,23 @@ require (
  github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
  github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
  github.com/xeipuuv/gojsonschema v1.2.0 // indirect
- github.com/zondax/ledger-go v0.14.1 // indirect
+ github.com/zondax/ledger-go v0.14.3 // indirect
  go.etcd.io/bbolt v1.3.7 // indirect
- golang.org/x/crypto v0.15.0 // indirect
+ go.opentelemetry.io/otel v1.19.0 // indirect
+ go.opentelemetry.io/otel/metric v1.19.0 // indirect
+ go.opentelemetry.io/otel/trace v1.19.0 // indirect
+ golang.org/x/crypto v0.16.0 // indirect
  golang.org/x/exp v0.0.0-20230711153332-06a737ee72cb // indirect
  golang.org/x/mod v0.14.0 // indirect
- golang.org/x/oauth2 v0.10.0 // indirect
+ golang.org/x/oauth2 v0.13.0 // indirect
  golang.org/x/sync v0.5.0 // indirect
- golang.org/x/sys v0.14.0 // indirect
- golang.org/x/term v0.14.0 // indirect
+ golang.org/x/sys v0.16.0 // indirect
+ golang.org/x/term v0.15.0 // indirect
  golang.org/x/tools v0.15.0 // indirect
- golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
- google.golang.org/api v0.126.0 // indirect
- google.golang.org/appengine v1.6.7 // indirect
- google.golang.org/genproto v0.0.0-20230711160842-782d3b101e98 // indirect
- google.golang.org/genproto/googleapis/rpc v0.0.0-20230711160842-782d3b101e98 // indirect
+ google.golang.org/api v0.149.0 // indirect
+ google.golang.org/appengine v1.6.8 // indirect
+ google.golang.org/genproto v0.0.0-20240102182953-50ed04b92917 // indirect
+ google.golang.org/genproto/googleapis/rpc v0.0.0-20240108191215-35c7eff3a6b1 // indirect
  gopkg.in/ini.v1 v1.67.0 // indirect
  gopkg.in/natefinch/npipe.v2 v2.0.0-20160621034901-c1b8fa8bdcce // indirect
  gopkg.in/yaml.v2 v2.4.0 // indirect
@@ -244,7 +247,7 @@ replace (
  // use cosmos fork of keyring
  github.com/99designs/keyring => github.com/cosmos/keyring v1.2.0
  // use Cosmos-SDK fork to enable Ledger functionality
- github.com/cosmos/cosmos-sdk => github.com/evmos/cosmos-sdk v0.47.5-evmos
+ github.com/cosmos/cosmos-sdk => github.com/evmos/cosmos-sdk v0.47.8-evmos
  // use Evmos geth fork
  github.com/ethereum/go-ethereum => github.com/evmos/go-ethereum v1.10.26
  // use cosmos flavored protobufs