defirisk.co
rubric v1.7.0

EIP-712 domain separator missing chainId

Frax Finance's assessment for RD-F-020 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

frxGov extends OZ Governor which implements EIP-712 with chainId in domain separator by default. sfrxETH (ERC-4626) and Fraxlend permits not independently verified for domain separator chainId. Tool run required.

Sources #

  • Curator note
    EIP-712 analysis gapOZ Governor includes chainId in domain separator by default; sfrxETH/Fraxlend permit domain separators not independently verifiedretrieved 2026-05-17

Methodology #

Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol frax factor RD-F-020 score gray collected_at 2026-05-16 20:44:31