medium10 pts · first answer countssmart-contract-securitysignatures
A signature that leaves out a field
A backend signs (amount, nonce) for withdrawals, and the contract pays msg.sender. The signature is sent to the user's browser. What is the risk?
Discussion 0
Join free to post in the discussion.
Related questions
- Private variables are public dataBlockchain Developer
- Verifying a contract on EtherscanBlockchain Developer
- Sharing a seed phraseBlockchain Developer
- Why use OpenZeppelinBlockchain Developer
- The checks-effects-interactions orderBlockchain Developer
- What nonReentrant doesBlockchain Developer
- What front-running isBlockchain Developer
- Anyone can mintBlockchain Developer