highSignature replayEVM-Solidity
Biconomy: Replay attack (EIP712 signed transaction)
- Payout
- $0
- Protocol
- Biconomy
- Disclosed
- Mar 3, 2023
- Source
- code4rena
Biconomy's SmartAccount contract allowed authorization signatures to be replayed across different batch keys. Because the batch identifier was passed as an external parameter to transaction execution rather than included in the EIP-712 signature digest calcula …
Similar reports
- No close matches yet.
References
- https://github.com/code-423n4/2023-01-biconomy-findings/issues/36
- https://github.com/code-423n4/2023-01-biconomy-findings
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.