From 9c2de12ce8c84513414156e0f72a329f69a38837 Mon Sep 17 00:00:00 2001
From: clD11 <23483715+clD11@users.noreply.github.com>
Date: Mon, 17 Jul 2023 13:29:13 +0100
Subject: [PATCH] added duplicate deposit destination to validate report

---
 tools/payments/report.go | 29 ++++++++++++++++++++++++++++-
 1 file changed, 28 insertions(+), 1 deletion(-)

diff --git a/tools/payments/report.go b/tools/payments/report.go
index 3774ae644..d99fdf9db 100644
--- a/tools/payments/report.go
+++ b/tools/payments/report.go
@@ -10,6 +10,7 @@ import (
 	"encoding/hex"
 	"encoding/json"
 	"encoding/pem"
+	"errors"
 	"fmt"
 	"io"
 
@@ -98,13 +99,39 @@ func (ar AttestedReport) IsAttested() (bool, error) {
 	return true, nil
 }
 
-// Compare takes a prepared report and validates the transactions are the same as the attested report
+// ErrDuplicateDepositDestination is the error returned when a report contains duplicate deposit destinations.
+var ErrDuplicateDepositDestination = errors.New("duplicate deposit destination")
+
+// Compare takes a prepared and attested report and validates that both contain the same number of transactions,
+// that there is only a single deposit destination per transaction and that the total sum of BAT is the
+// same in each report.
 func Compare(pr PreparedReport, ar AttestedReport) error {
 	// check that the number of transactions match
 	if len(pr) != len(ar) {
 		return fmt.Errorf("number of transactions do not match - attested: %d; prepared: %d", len(ar), len(pr))
 	}
 
+	// Check for duplicate deposit destinations in prepared report.
+	u := make(map[string]bool)
+	for _, txn := range pr {
+		_, exists := u[txn.To]
+		if exists {
+			return ErrDuplicateDepositDestination
+		}
+		u[txn.To] = true
+	}
+
+	// Check for duplicate deposit destinations in attested report.
+	u = make(map[string]bool)
+	for _, txn := range ar {
+		_, exists := u[txn.To]
+		if exists {
+			return ErrDuplicateDepositDestination
+		}
+		u[txn.To] = true
+	}
+
+	// Assert the total bat in each report is equal.
 	p := pr.SumBAT()
 	a := ar.SumBAT()