Automatically merged updates to draft EIP(s) 3074 (#3462)

Hi, I'm a bot! This change was automatically merged because:

 - It only modifies existing Draft, Review, or Last Call EIP(s)
 - The PR was approved or written by at least one author of each modified EIP
 - The build is passing
This commit is contained in:
Sam Wilson 2021-04-02 18:38:45 -04:00 committed by GitHub
parent 13a447e91e
commit 2d03a50d8f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -271,7 +271,7 @@ https://github.com/quilt/go-ethereum/tree/eip-3074
The following is a non-exhaustive list of checks/pitfalls/conditions that invokers _should_ be wary of:
- Replay protection should be implemented by the invoker, and included in `commit`. Without it, a malicious actor can reuse a signature, repeating its effects.
- Replay protection (ex. a nonce) should be implemented by the invoker, and included in `commit`. Without it, a malicious actor can reuse a signature, repeating its effects.
- `value` should be included in `commit`. Without it, a malicious sponsor could cause unexpected effects in the callee.
- `gas` should be included in `commit`. Without it, a malicious sponsor could cause the callee to run out of gas and fail, griefing the sponsee.
- The current chain id should be included in `commit` and checked against `CHAINID` on *every transaction*. Without it, a malicious sponsor could replay a signature on a different chain.