★ Bridge ecrecover checks result ≠ address(0)
Across Protocol's assessment for RD-F-151 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
[★ CRITICAL] GREEN: HubPool has no ecrecover calls — verified via Etherscan source analysis. SpokePool delegates to OpenZeppelin SignatureChecker.isValidSignatureNow() which correctly handles address(0) returns. The Feb 2026 Deposit Flow audit found a medium EIP-712 replay in CounterfactualDepositSpokePool (periphery only, not core settlement path). Raw ecrecover without address(0) validation is NOT present in the core HubPool or standard SpokePool contracts.
Sources #
- Etherscanhttps://etherscan.io/address/0xc186fa914353c44b2e33ebe05f21846f1048bedaretrieved 2026-04-28
- https://www.openzeppelin.com/news/deposit-flow-auditretrieved 2026-04-28
Methodology #
Determine whether the bridge verifier code rejects `ecrecover` returns of `address(0)`.
See the full factor methodology and distribution across all protocols →