signature-malleability

What problem does it solve?

This Skill addresses vulnerabilities related to the improper handling of ECDSA signatures in smart contracts, which can lead to replay attacks or unauthorized actions.

Core Features & Use Cases

• Detects insecure signature usage: Identifies contracts using raw ECDSA signatures for authorization or deduplication without proper normalization.
• Analyzes signature verification: Checks for common pitfalls like direct ecrecover usage without nonce or domain separation, and lack of s-value range checks.
• Use Case: Auditing a DeFi protocol that uses signatures to authorize critical state changes, ensuring that attackers cannot reuse or manipulate valid signatures.

Quick Start

Analyze the 'VaultContract.sol' for signature malleability vulnerabilities.