mediumSignature replayEVM-Solidity
Paladin: EIP712 chainId is hardcoded which can cause replay attacks in case of hardfork
- Payout
- $0
- Protocol
- Paladin
- Disclosed
- Feb 7, 2024
- Source
- hats
Paladin's BoostV2.vy boost-delegation contract builds its EIP-712 domain separator once in __init__ by hashing the deployment-time chain.id and storing it in an immutable DOMAIN_SEPARATOR. Because the separator is snapshotted rather than recomputed from the ch …
Similar reports
- No close matches yet.
References
- https://github.com/hats-finance/Paladin-0x1610bfde27e57b068af7f38aec3d2a7b1d146989/issues/16
- https://github.com/hats-finance/Paladin-0x1610bfde27e57b068af7f38aec3d2a7b1d146989
This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.