HardhatFoundry
30,000 USDC
View results
Submission Details
Severity: medium
Valid

Missing support for ERC-165

Summary

The Nexus wallet fails to provide support for ERC-165, as required by the standard.

Vulnerability Details

The Nexus smart account is intended to be compliant with the ERC-7579 standard. This specification, requires smart accounts to implement ERC-165:

ERC-165
Smart accounts MUST implement ERC-165. However, for every interface function that reverts instead of implementing the functionality, the smart account MUST return false for the corresponding interface id.

Additionally, as the smart account supports also the ERC-1155 Token Receiver, the ERC-1155 requires contracts that implement the ERC1155TokenReceiver interface to support ERC-165:

Smart contracts MUST implement the ERC-165 supportsInterface function and signify support for the ERC1155TokenReceiver interface to accept transfers. See “ERC1155TokenReceiver ERC-165 rules” for further detail.

Impact

Failure to adhere to the standard and their specifications could lead to incompatibilities and different integration issues.

Tools Used

None.

Recommendations

Implement support for ERC-165 as required by ERC-7579 and ERC-1155.

Updates

Lead Judging Commences

0xnevi Lead Judge 10 months ago
Submission Judgement Published
Validated
Assigned finding tags:

finding-ERC7579-ERC165-non-compliant

The argument for medium severity here is the potential inconsistencies with external integrations that would like to query whether a contract supports the interface. The impact is arguable though, so would leave open for arguments during appeals period.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.