Submission Details
Severity:
H-1. Incorrect signature type hash defination breaks `RankedChoice.sol::rankCandidatesBySig`
Summary
Vulnerability Details
The EIP-712 standard, the type hash should be defined as keccak256("rankCandidates(address[])") in a struct. instead of keccak256("rankCandidates(uint256[])"). This will ensure that the signature is correctly validated.
Impact
This will cause the signature to be incorrectly validated. RankedChoice.sol::rankCandidatesBySig will not work as intented. Voters can not vote without paying gas fees which is one of the main features of the protocol.
Tools Used
Recommendations
Consider changing the type hash to keccak256("rankCandidates(address[])") in a the struct.
Rewards breakdown
nSLOC
140This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.