1 matches found
GHSA-626Q-V9J4-MCP4 OpenZeppelin Contracts contains Improper Verification of Cryptographic Signature
Cause isvalidethsignature is missing a call to finalizekeccak after calling verifyethsignature. Impact As a result, any contract using isvalidethsignature from the account library such as the EthAccount preset is vulnerable to a malicious sequencer. Specifically, the malicious sequencer would be...
6CVSS5.7AI score0.0022EPSS
SaveExploits0References5
20