Summary

• await service nonce initialization before processing confirmed BGL deposits
• reserve the current ETH/BSC nonce before incrementing the local counter so the first available nonce is not skipped
• accept the documented ETH_NONCE environment variable while preserving the existing ETH__NONCE fallback
• add focused nonce helper coverage that does not require live bridge services

Why

setupNonce() called async getTransactionCount() without awaiting it. On a cold service start, ethNonce / bscNonce could become a Promise; the later increment path then risked passing an invalid nonce into sendWBGL().

Verification

• npm install --ignore-scripts --package-lock=false in service/
• npx mocha src/tests/nonce.js --timeout 10000 in service/
• npx prettier --check src/utils/nonce.js src/utils/config.js src/modules/chores.js src/tests/nonce.js in service/
• node --check src/utils/nonce.js && node --check src/utils/config.js && node --check src/modules/chores.js && node --check src/tests/nonce.js in service/
• npx eslint --parser-options '{"ecmaVersion":2022,"sourceType":"module"}' src/utils/nonce.js src/utils/config.js src/modules/chores.js src/tests/nonce.js in service/
• git diff --check

Note: plain npx eslint ... fails before analysis in this repo because the current ESLint config does not parse the service's ES-module import/export syntax.

Submitted for Bitgesell improvement bounty consideration: BitgesellOfficial/bitgesell#39. Payment details can be provided if accepted.