EIP-712 domain separator missing chainId
Cap (cUSD / stcUSD)'s assessment for RD-F-020 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
OFTPermit.sol and L2TokenUpgradeable.sol inherit ERC20Permit from OpenZeppelin v5.2.0. OZ ERC20Permit implements EIP-712 domain separator correctly including chainId. No custom EIP-712 domain separator found without chainId field.
Sources #
- GitHubCap Contracts package.json — OZ Versionpackage.json — resolutions: @openzeppelin/contracts: ^5.2.0retrieved 2026-05-17
- OFTPermit.sol — EIP-712 Domain Separatorcontracts/token/OFTPermit.sol — ERC20Permit inheritance (OZ v5.2.0 includes chainId in domain separator)retrieved 2026-05-17
Methodology #
Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol cap factor RD-F-020 score green collected_at 2026-05-17 10:56:24