signature-replay-analysis

Smart contract signature replay vulnerabilities are detected by analyzing code for same-chain, cross-chain, cross-contract, nonce-skip, and expired signature types. This Skill audits EIP-712 domain separators, nonce management, and ecrecover edge cases to prevent unauthorized transaction replays.

ecrecover edge cases in smart contract security involve signature malleability and invalid signature inputs that allow replay attacks. This Skill analyzes ecrecover implementations alongside EIP-712 compliance and ERC-1271 support to identify exploitable cryptographic signature verification weaknesses.

EIP-712 domain separators prevent cross-chain signature replay by binding signatures to a specific chain and contract. This Skill verifies domain separator compliance and checks nonce management to ensure signatures cannot be replayed across different chains or contracts.

Yes, signature replay analysis covers permit and permit2 safety by evaluating nonce management and expiration checks. It ensures that token approval mechanisms using off-chain signature verification cannot be exploited through replay or nonce-skip vulnerabilities.

Yes, you can audit ERC-1271 off-chain signature verification mechanisms using this Skill. It analyzes ERC-1271 support to ensure smart contract-based signature validation is resistant to replay attacks and ecrecover edge cases.

A cross-contract signature replay attack occurs when a valid signature is reused across multiple smart contracts that share verification logic. This Skill identifies these vulnerabilities by analyzing EIP-712 domain separator usage and nonce management across the protocol.