defirisk.co
rubric v1.7.0

EIP-712 domain separator missing chainId

BENQI's assessment for RD-F-020 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

QI token governance contract (0x8729438EB15e2C8B576fCc6AeCdA6A148776C0F5) may use EIP-712 for permit/vote signatures; source not in public BENQI-Smart-Contracts GitHub repo. Core qiToken lending contracts do not use EIP-712. Cannot confirm chainId presence in QI token domain separator without direct source inspection of Snowtrace-verified QI token contract.

Sources #

  • Etherscan
    QI Token SnowtraceQI Token address on Snowtrace — source inspection needed for domain separatorretrieved 2026-05-16

Methodology #

Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol benqi factor RD-F-020 score gray collected_at 2026-05-16 11:02:12