Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: high
Valid

`_validateSignature` always return `SIG_VALIDATION_SUCCESS`, causing invalid signatures to be accepted

Updates

Lead Judging Commences

inallhonesty Lead Judge 12 months ago
Submission Judgement Published
Validated
Assigned finding tags:

ECDSA.recover should check against sender

`_validateSignature` SHOULD return SIG_VALIDATION_FAILED (and not revert) on signature mismatch.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.