Submission Details
Severity:
Incorrect EIP712 implementation
Summary
Incorrect EIP712 implementation
Vulnerability Details
The implementation of EIP712 in the deployProxyAndDistributeBySignature() deviates from the EIP712 standard due to the following reasons:
No typehash is included
bytesdata type is used directly instead of using the keccak256 hash of their contents
https://eips.ethereum.org/EIPS/eip-712
Impact
Possible failure when the user tries to sign using existing libraries
Tools Used
Manual review
Recommendations
Follow the EIP712 guidelines
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
19477 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.