EIP-712 domain separator missing chainId
BENQI's assessment for RD-F-020 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
QI token governance contract (0x8729438EB15e2C8B576fCc6AeCdA6A148776C0F5) may use EIP-712 for permit/vote signatures; source not in public BENQI-Smart-Contracts GitHub repo. Core qiToken lending contracts do not use EIP-712. Cannot confirm chainId presence in QI token domain separator without direct source inspection of Snowtrace-verified QI token contract.
Sources #
- EtherscanQI Token SnowtraceQI Token address on Snowtrace — source inspection needed for domain separatorretrieved 2026-05-16
Methodology #
Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol benqi factor RD-F-020 score gray collected_at 2026-05-16 11:02:12