Skip to content
Request an audit

‹ Findings database

BRC20Factory::addSigner() and Vault::addSigner() must not allow adding the zero address as a signer

Low/InfoOrange Bridge audit·Three Sigma·Cross-chain bridge·15th July, 20243S-OB-L04

Description

The signature verification in BRC20Factory and Vault does not check that the recovered address is not null, which means that if address(0) is added as a signer, it would be possible to forge signatures.

Recommendation

In BRC20Factory::addSigner() and Vault::addSigner(), revert if an address(0) account is sent as argument.

Status

Addressed in #4082cc6.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests