defirisk.co
rubric v1.7.0

EIP-712 domain separator missing chainId

Stargate Finance's assessment for RD-F-020 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

Source inspection of TokenMessaging.sol shows no EIP-712 signature implementation. Stargate v2 does not use EIP-712 signed messages for its cross-chain flow — message authentication is handled by LayerZero's DVN network. N-A for the core bridge flow.

Sources #

  • Curator note
    Extracted from 01-code-security.md — RD-F-020 finding; no URL cited in originalretrieved 2026-04-28

Methodology #

Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol stargate factor RD-F-020 score not_applicable collected_at 2026-04-28 01:38:41