defirisk.co
rubric v1.7.0

EIP-712 domain separator missing chainId

Lista DAO's assessment for RD-F-020 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

hay.sol initializes with chainId_ parameter in initialize(uint256 chainId_, string memory symbol_, uint256 supplyCap_). LisUSD.sol uses OZ upgradeable EIP-712 pattern with chainId in domain separator. Both stablecoin contracts correctly include chainId in domain separator.

Sources #

  • GitHub
    hay.sol Sourcehay.sol initialize function signature includes chainId_ parameter for EIP-712 domain separatorretrieved 2026-05-12
  • GitHub
    LisUSD.sol SourceLisUSD.sol — OZ upgradeable EIP-712 pattern with proper chainId bindingretrieved 2026-05-12

Methodology #

Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol lista-dao factor RD-F-020 score green collected_at 2026-05-12 17:54:05