mirror of
https://github.com/status-im/EIPs.git
synced 2025-02-23 04:08:09 +00:00
Automatically merged updates to draft EIP(s) 3074 (#3462)
Hi, I'm a bot! This change was automatically merged because: - It only modifies existing Draft, Review, or Last Call EIP(s) - The PR was approved or written by at least one author of each modified EIP - The build is passing
This commit is contained in:
parent
13a447e91e
commit
2d03a50d8f
@ -271,7 +271,7 @@ https://github.com/quilt/go-ethereum/tree/eip-3074
|
||||
|
||||
The following is a non-exhaustive list of checks/pitfalls/conditions that invokers _should_ be wary of:
|
||||
|
||||
- Replay protection should be implemented by the invoker, and included in `commit`. Without it, a malicious actor can reuse a signature, repeating its effects.
|
||||
- Replay protection (ex. a nonce) should be implemented by the invoker, and included in `commit`. Without it, a malicious actor can reuse a signature, repeating its effects.
|
||||
- `value` should be included in `commit`. Without it, a malicious sponsor could cause unexpected effects in the callee.
|
||||
- `gas` should be included in `commit`. Without it, a malicious sponsor could cause the callee to run out of gas and fail, griefing the sponsee.
|
||||
- The current chain id should be included in `commit` and checked against `CHAINID` on *every transaction*. Without it, a malicious sponsor could replay a signature on a different chain.
|
||||
|
Loading…
x
Reference in New Issue
Block a user