Skip to content

[audit-04] fix: [TRST-M-1] correct TYPEHASH string for RCAU #1201

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: ma/indexing-payments-audit-fixes-03-H-3
Choose a base branch
from

Conversation

matiasedgeandnode
Copy link
Contributor

Screenshot 2025-07-22 at 22 15 26

Copy link

openzeppelin-code bot commented Jul 23, 2025

[audit-04] fix: [TRST-M-1] correct TYPEHASH string for RCAU

Generated at commit: 29dfdccadf74dce4b7a52ae658328ad026f59c9c

🚨 Report Summary

Severity Level Results
Contracts Critical
High
Medium
Low
Note
Total
2
4
0
15
39
60
Dependencies Critical
High
Medium
Low
Note
Total
0
0
0
0
0
0

For more details view the full report in OpenZeppelin Code Inspector

@matiasedgeandnode matiasedgeandnode force-pushed the ma/indexing-payments-audit-fixes-03-H-3 branch from 72a5145 to 583e0f1 Compare August 3, 2025 18:35
@matiasedgeandnode matiasedgeandnode force-pushed the ma/indexing-payments-audit-fixes-04-M-1 branch from 3172bcd to 68508b6 Compare August 3, 2025 18:36
@matiasedgeandnode matiasedgeandnode force-pushed the ma/indexing-payments-audit-fixes-03-H-3 branch from 583e0f1 to 8048c4c Compare August 3, 2025 19:22
Fixes TRST-M-1 audit finding:

Wrong TYPEHASH string is used for agreement updates, limiting functionality.

* Fixed EIP712_RCAU_TYPEHASH to use correct uint64 types for deadline and endsAt fields (was incorrectly using uint256)
* This prevents signature verification failures for RecurringCollectionAgreementUpdate
@matiasedgeandnode matiasedgeandnode force-pushed the ma/indexing-payments-audit-fixes-04-M-1 branch from 68508b6 to 29dfdcc Compare August 3, 2025 19:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants