Wallet timing: custom relay implementation has no session expiry on envelopes

[therealjhay]

ProblemWalletConnect v2 envelopes and the pairing topic carry no client-side expiry enforcement in walletconnect.ts. Stale pairing/session topics can be reused, and WCEncryptedEnvelope responses are accepted regardless of age.

1. No expiresAt check on accepted session proposals/settles.
2. Cached topics are not cleaned up on expiry, so memory and relay subscriptions leak over long sessions.
3. There is no per-message timestamp/AAD binding in the AES-GCM layers, weakening replay resistance compared with the WC spec.

Solution

• Store and enforce session/proposal expiry timestamps on both sides of the relay.
• Purge expired topics on interval and on new pairings.
• Follow the WC v2 envelope format (metadata, AAD) rather than a custom envelope shape.

Acceptance Criteria

• Expired session proposals are rejected instead of accepted.
• Relay subscriptions are cleaned up after session timeout.
• No growth in walletStore session state after repeated connect/disconnect.
• npm run build passes.

Note for Contributors: Write a clear PR description. Show a session that is accepted then rejected after expiry, and memory/heap stableness under repeated pairings.

[OLAMIGHTY010]

@OLAMIGHTY010 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I would like to work on this project

ℹ️ Repo Maintainers: To accept this application, review their application or assign @OLAMIGHTY010 to this issue.

[VeronicDev]

@VeronicDev has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi, I can fix this pls assign

ℹ️ Repo Maintainers: To accept this application, review their application or assign @VeronicDev to this issue.

[sophthegoodgirl]

@sophthegoodgirl has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi, I've carefully examined the issue and I already have a clear understanding of how I would approach it. I'm in a strong position to handle this efficiently and deliver a quality PR

ℹ️ Repo Maintainers: To accept this application, review their application or assign @sophthegoodgirl to this issue.

[oyeyemidavid-gif]

@oyeyemidavid-gif has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Please, I would like to work on this issue.

ℹ️ Repo Maintainers: To accept this application, review their application or assign @oyeyemidavid-gif to this issue.

[payfoxX]

@payfoxX has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

I love to fix this issue, kindly assign it to me. Thanks

ℹ️ Repo Maintainers: To accept this application, review their application or assign @payfoxX to this issue.

[Muyideen-js]

@Muyideen-js has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Hi, I can fix this

ℹ️ Repo Maintainers: To accept this application, review their application or assign @Muyideen-js to this issue.

[codewithzubair07]

@codewithzubair07 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

i would like to work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @codewithzubair07 to this issue.

[dollfins]

@dollfins has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

hello maintainer, can i work on this issue

ℹ️ Repo Maintainers: To accept this application, review their application or assign @dollfins to this issue.

[zuru122]

@zuru122 has applied to work on this issue as part of the Stellar Wave Program's 8th wave.

Can I work on this issues

ℹ️ Repo Maintainers: To accept this application, review their application or assign @zuru122 to this issue.

[drips-wave]

Congratulations, @zuru122! 🎉 Your application was accepted by the repo's maintainers, and the issue is due on August 31, 2026.

🧑‍💻 @zuru122: Please resolve the issue such that the repo's maintainers have enough time to review your contribution before the due date. You'll earn Points for completing the issue on-time, which will make you eligible for a share of the Stellar Wave Program's reward pool.

Warning

When opening a PR, please link it to this issue to ensure it gets tracked accurately. Points are awarded when this issue is marked as completed by the maintainer.

🤠 Repo maintainers: Please keep an eye on the contributor's progress and review their work before the due date. You can manage this issue, including adjusting its complexity and points, here.

🌊 Happy Wave 🌊