EIP-712 domain separator missing chainId
Stargate Finance's assessment for RD-F-020 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Source inspection of TokenMessaging.sol shows no EIP-712 signature implementation. Stargate v2 does not use EIP-712 signed messages for its cross-chain flow — message authentication is handled by LayerZero's DVN network. N-A for the core bridge flow.
Sources #
- Curator noteExtracted from 01-code-security.md — RD-F-020 finding; no URL cited in originalretrieved 2026-04-28
Methodology #
Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol stargate factor RD-F-020 score not_applicable collected_at 2026-04-28 01:38:41