framework icon indicating copy to clipboard operation
framework copied to clipboard

Mainnet rampup: Add a unique chainId to all signatures

Open rpanic opened this issue 9 months ago • 0 comments

Currently, signatures could theoretically be replay-attacked on chains with similar runtime method signatures, since the methodId is only the hash of the module name + method name. Therefore, any user transaction can be valid for multiple, seperate chains, similar to the replay attack scenario EVM-based chains have.

To fix this, we should add a globally unique chainId to every appchain, which will be part of every signature, therefore only being valid on that particular appchain

rpanic avatar Apr 03 '25 14:04 rpanic