Checking ERC20 contract address as well

Author: mikulas-mrva

pretix_eth/management/commands/confirm_payments.py

@@ -115,17 +115,22 @@ def confirm_payments_for_event(self, event: Event, no_dry_run, log_verbosity=0):
                     # ETH
                     payment_amount = w3.eth.getTransaction(signed_message.transaction_hash).value
                     receipt_reciever = receipt.to.lower()
+                    correct_recipient = receipt_reciever == signed_message.recipient_address.lower()
+
                 else:
                     # DAI
                     contract = w3.eth.contract(address=token.ADDRESS, abi=TOKEN_ABI)
                     transaction_details = contract.events.Transfer().processReceipt(receipt)[0].args
                     payment_amount = transaction_details.value
+                    # check that the payment happened on the right contract address
+                    correct_contract = token.ADDRESS.lower() == receipt.to.lower()
                     # take recipient address from the topics, not from the "from" field, as that's the contract address
                     receipt_reciever = receipt.logs[0].topics[2][12:].hex().lower()
+                    correct_recipient = correct_contract and (receipt_reciever == signed_message.recipient_address.lower())
+
 
                 receipt_sender = getattr(receipt, 'from').lower()
                 correct_sender = receipt_sender == signed_message.sender_address.lower()
-                correct_recipient = receipt_reciever == signed_message.recipient_address.lower()
 
                 if not (correct_sender and correct_recipient):
                     logger.warning(