Skip to content
Request an audit

‹ All findings

Use of abi.encodePacked() with Dynamic Types

Low/InfoVertex·by the Three Sigma team·Hybrid orderbook DEX·3rd April 20243S-Vertex-N02

Report PageSource

Description

Using abi.encodePacked() with dynamic types, as seen in Verifier.sol on L160 and in Endpoint.sol on L749, isn't advisable when feeding the outcome into a hashing function like keccak256(), due to hash collisions.

Recommendation

Use abi.encode() instead.

Status

Acknowledged

Found during Three Sigma’s team review · 0xSimao on the review team