EIP-712 domain separator missing chainId

M^0's assessment for RD-F-020 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

MToken implements EIP-2612 (permit) and EIP-3009 (authorization). Sherlock contest and Certora FV covered EIP-712 compliance. MZero-Labs/common library used for ERC-20 Extended including EIP-712. No cross-chain replay finding in any of 8 audit firm reports — consistent with proper chainId inclusion.

Sources #

GitHub
Sherlock MZero Audit ContestSherlock MZero contest — ERC-2612/EIP-3009 coverageretrieved 2026-05-16
GitHub
MZero-Labs Common LibraryMZero-Labs/common library — EIP-712 implementationretrieved 2026-05-16

Methodology #

Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol m0 factor RD-F-020 score green collected_at 2026-05-16 09:46:19