Project

Summary

https://github.com/Cyfrin/2024-11-one-world/blob/1e872c7ab393c380010a507398d4b4caca1ae32b/contracts/meta-transaction/NativeMetaTransaction.sol#L100

The ecrecover function is susceptible to signature malleability.

Vulnerability Details

The ecrecover function is susceptible to signature malleability. This means that the same message can be signed in multiple ways, allowing an attacker to change the message signature without invalidating it.

Impact

This can lead to unexpected behavior in smart contracts, such as the loss of funds or the ability to bypass access control.

Tools Used

VS code

Recommendations

Consider using OpenZeppelin's ECDSA library instead of the built-in function.