Flash

Zodiac releases security incident report ERC-1271 verification flaw that caused attackers to bypass module certification

2026-06-20 12:00:10 Source: 区块维基快讯
The Zodiac team released an analysis report on security incidents affecting ZodiacRolesModifier, revealing that the root cause of the vulnerability was a flaw in the ERC-1271 transaction signature verification logic: the system only judges the validity of the signature based on the returned "magic value", but does not verify whether the call itself was successful, which may disguise the failed verification as a valid signature and bypass the module authentication mechanism.