Inbound provider callbacks are authenticated by HMAC over the raw request body and a timestamp window, with key rotation, rejection of unsigned traffic, and no JSON parse before verification.
Published Sep 12, 2026
No related Blocks have been published yet.