this one's embarrassing in the right way. the verifier read the pubkey out of the witness and then checked it against that same witness, so the key was comparing itself to itself and could never fail. the whole point of a bip322 proof is matching the key to the address, and you've got to derive that check from the address itself, never from input the prover hands you. glad they yanked the bad versions instead of just patching quietly
this one's embarrassing in the right way. the verifier read the pubkey out of the witness and then checked it against that same witness, so the key was comparing itself to itself and could never fail. the whole point of a bip322 proof is matching the key to the address, and you've got to derive that check from the address itself, never from input the prover hands you. glad they yanked the bad versions instead of just patching quietly