Project

Summary

There is a vulnerability in the Protocol NativeMetaTransaction.sol that allows for user signed orders to be replayed. This means that the same order can be executed multiple times, potentially leading to loss of funds.

Vulnerability Details

https://github.com/Cyfrin/2024-11-one-world/blob/1e872c7ab393c380010a507398d4b4caca1ae32b/contracts/meta-transaction/NativeMetaTransaction.sol#L70

Impact

User signed orders can be replayed which could potential loss of funds when executed multiple times.

Tools Used

Manual Review

Recommendations

Introduce nonce and verification that operator parameters are the same that the user signed.