Submission Details
Severity:
Using `ecrecover` directly vulnerable to signature malleability
Summary
NativeMetaTransaction::verify call ecrecover directly but due to the symmetrical nature of the elliptic curve for every [v,r,s] there exists another [v,r,s] that returns the same valid result.
Impact
Usage of ecrecover directly is vulnerable to signature malleability.
Tools Used
Manual Review
Recommendations
Use OpenZeppelin's ECDSA library with a version of OpenZeppelin >= 4.7.3.
Prize pool breakdown
Total prize
15,000 USDC
nSLOC
54128 USDC / LOC
14,000 USDC
1,000 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.