ecrecover zero-address return unchecked
EigenLayer's assessment for RD-F-019 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Code4rena 2023 identified signature replay issue in depositIntoStrategyWithSignature (issue #363) — addressed in post-contest fixes. Subsequent Sigma Prime and Certora audits (post-2023) did not identify unguarded ecrecover returns as open findings. Certora Merkle engagement (Jul 2025) covered Merkle proof verification domain.
Sources #
- GitHubCode4rena EigenLayer finding #363 — ecrecover/signaturecode-423n4/2023-04-eigenlayer-findings issue #363 — signature replayretrieved 2026-04-28
Methodology #
Determine whether any `ecrecover` call result is used without a `!= address(0)` guard.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol eigenlayer factor RD-F-019 score green collected_at 2026-04-28 13:58:44