Submission Details
Severity:
EIP-712 Typehash Typo Breaks Signature Verification
EIP-712 Typehash Typo Breaks Signature Verification
Summary
The MESSAGE_TYPEHASH constant contains a critical typo ("addres" instead of "address"), which breaks EIP-712 compliance and renders the signature verification system unreliable.
Vulnerability Details
// src/SnowmanAirdrop.sol:48
bytes32 private constant MESSAGE_TYPEHASH = keccak256("SnowmanClaim(addres receiver, uint256 amount)");
Impact
This error will cause signature verification failures.
Recommendations
Fix the typehash definition.
- bytes32 private constant MESSAGE_TYPEHASH = keccak256("SnowmanClaim(addres receiver, uint256 amount)");
+ bytes32 private constant MESSAGE_TYPEHASH = keccak256("SnowmanClaim(address receiver, uint256 amount)");
Updates
Lead Judging Commences
yeahchibyke 25 days ago
Submission Judgement Published Assigned finding tags:
Inconsistent MESSAGE_TYPEHASH with standard EIP-712 declaration
A typo in the `MESSAGE_TYPEHASH` variable of the `SnowmanAirdrop` contract will prevent signature verification claims. Used `addres` instead of `address`
Rewards breakdown
nSLOC
215This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.