Use the standard ECDSA.sol from OpenZeppelin to perform signature related operations
Impact
Direct use of the ecrecover function as seen NativeMetaTransaction.sol#L100, may lead to some vulnerabilites, like signature malleability (which is reported in the known-issues). However, utilizing standard, battle-tested contracts can mitigate unforeseen risks and ensure robust handling of these edge cases.
Description
It has become a standard practice to use ECDSA.sol from OpenZeppelin to perform signature related operations and verifications. As their suite of contracts and libraries are battle tested resulting in much secure and efficient handling of edge-cases, missed by developers.
Tools Used
Manual Review
Recommendation
Use OpenZeppelin's ECDSA.sol lib for operations related to the signature functionalities
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.