Frankencoin - Bauer's results

A decentralized and fully collateralized stablecoin.

General Information

Platform: Code4rena

Start Date: 12/04/2023

Pot Size: $60,500 USDC

Total HM: 21

Participants: 199

Period: 7 days

Judge: hansfriese

Total Solo HM: 5

Id: 231

League: ETH

Frankencoin

Findings Distribution

Researcher Performance

Rank: 129/199

Findings: 1

Award: $22.60

QA:
grade-b

🌟 Selected for report: 0

🚀 Solo Findings: 0

This DOMAIN_SEPARATOR() is not standard implementation

As the code below, the domain separator is built with chainId and verifyingContract.

    function DOMAIN_SEPARATOR() public view returns (bytes32) {
        return
            keccak256(
                abi.encode(
                    //keccak256("EIP712Domain(uint256 chainId,address verifyingContract)");
                    bytes32(0x47e79534a245952e8b16893a336b85a3d9ea9fa8c573f3d803afb92a79469218),
                    block.chainid,
                    address(this)
                )
            );
    }

However, the standard implementation looks like this: keccak256("EIP712Domain(string name,string version,uint256 chainId,address verifyingContract,bytes32 sal)");

name: the dApp or protocol name (e.g. "Uniswap")
version: version number of your dApp or platform
chainId: EIP-155 chain id
verifyingContract: The Ethereum address of the contract that will verify the signature (accessible via this)
salt: A unique 32-byte value hardcoded into both the contract and the dApp meant as a last-resort to distinguish the dApp from others

#0 - c4-judge

2023-05-16T16:15:25Z

hansfriese marked the issue as grade-b

AuditHub

A portfolio for auditors, a security profile for protocols, a hub for web3 security.

Built bymalatrax © 2024

Auditors

Browse

Contests

Browse

Get in touch

ContactTwitter