CCTP routes: Ensure source token is USDC (#555)

* ensure source token is USDC

* use isSameToken

Author: artursapek

connect/src/routes/cctp/automatic.ts

@@ -1,11 +1,12 @@
 import type { Chain, Network } from "@wormhole-foundation/sdk-base";
 import { amount, circle, contracts } from "@wormhole-foundation/sdk-base";
-import type {
-  ChainAddress,
-  ChainContext,
-  CircleTransferDetails,
-  Signer,
-  TokenId,
+import {
+  isSameToken,
+  type ChainAddress,
+  type ChainContext,
+  type CircleTransferDetails,
+  type Signer,
+  type TokenId,
 } from "@wormhole-foundation/sdk-definitions";
 import { CircleTransfer } from "../../protocols/cctp/cctpTransfer.js";
 import { TransferState } from "../../types.js";
@@ -85,6 +86,16 @@ export class AutomaticCCTPRoute<N extends Network>
     fromChain: ChainContext<N>,
     toChain: ChainContext<N>,
   ): Promise<TokenId[]> {
+    // Ensure the source token is USDC
+    const sourceChainUsdcContract  = circle.usdcContract.get(fromChain.network, fromChain.chain);
+    if (!sourceChainUsdcContract ) return [];
+    if (!isSameToken(
+      sourceToken,
+      Wormhole.tokenId(fromChain.chain, sourceChainUsdcContract),
+    )){
+      return [];
+    }
+
     const { network, chain } = toChain;
     if (!circle.usdcContract.has(network, chain)) return [];
     return [Wormhole.chainAddress(chain, circle.usdcContract.get(network, chain)!)];

connect/src/routes/cctp/manual.ts

@@ -6,7 +6,7 @@ import type {
   Signer,
   TokenId,
 } from "@wormhole-foundation/sdk-definitions";
-import { CircleBridge } from "@wormhole-foundation/sdk-definitions";
+import { CircleBridge, isSameToken } from "@wormhole-foundation/sdk-definitions";
 import { signSendWait } from "../../common.js";
 import { CircleTransfer } from "../../protocols/cctp/cctpTransfer.js";
 import type { TransferReceipt } from "../../types.js";
@@ -79,6 +79,16 @@ export class CCTPRoute<N extends Network>
     fromChain: ChainContext<N>,
     toChain: ChainContext<N>,
   ): Promise<TokenId[]> {
+    // Ensure the source token is USDC
+    const sourceChainUsdcContract = circle.usdcContract.get(fromChain.network, fromChain.chain);
+    if (!sourceChainUsdcContract ) return [];
+    if (!isSameToken(
+      sourceToken,
+      Wormhole.tokenId(fromChain.chain, sourceChainUsdcContract),
+    )){
+      return [];
+    }
+
     const { network, chain } = toChain;
     if (!circle.usdcContract.has(network, chain)) return [];
     return [Wormhole.chainAddress(chain, circle.usdcContract.get(network, chain)!)];