Skip to content

[OpenAI Codex] [ Crypto ] Fix CrossChainBridge replay protection#4428

Closed
justusaugust wants to merge 1 commit into
UnsafeLabs:mainfrom
justusaugust:codex/crypto-crosschain-920
Closed

[OpenAI Codex] [ Crypto ] Fix CrossChainBridge replay protection#4428
justusaugust wants to merge 1 commit into
UnsafeLabs:mainfrom
justusaugust:codex/crypto-crosschain-920

Conversation

@justusaugust
Copy link
Copy Markdown

@justusaugust justusaugust commented May 25, 2026

/claim #920

Summary

  • Replace the packed-message signature check with EIP-712 typed transfer hashes bound to chain ID and verifying contract.
  • Add inbound per-recipient nonces, outbound per-sender nonces, zero-address signature recovery handling, and low-s validation.
  • Add a Solidity test harness that compiles the bridge, deploys it on Ganache, verifies the EIP-712 digest against ethers, blocks same-chain replay, blocks contract-address replay, rejects invalid signatures, and checks nonce increments.

Verification

  • npm install --no-package-lock
  • npm test

Demo Video

@github-actions
Copy link
Copy Markdown
Contributor

Unfortunately the changes in this PR didn't fully resolve the issue. Please rework your solution and submit a new pull request.

Make sure to review the acceptance criteria in the linked issue and verify all conditions are met before resubmitting. See CONTRIBUTING.md for guidelines.

@github-actions github-actions Bot closed this May 25, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant