Skip to content

fix(primitives): reject high-s executor signatures on evnode txs - #425

Merged
tac0turtle merged 2 commits into
mainfrom
fix/reject-high-s-executor-signature
Oct 27, 2026
Merged

tac0turtle merged 2 commits into
mainfrom
fix/reject-high-s-executor-signature

Conversation

@damiannolan

Copy link
Copy Markdown
Contributor

Description

recover_executor recovered the executor without enforcing EIP-2 low-s, so a malleable high-s signature was accepted. Reject it there, and route the SignerRecoverable impls for EvTxEnvelope and EvPooledTxEnvelope through recover_executor so the check applies on both paths instead of the duplicated inline recovery.

Adds a regression test for the high-s rejection.

Type of Change

  • Bug fix (non-breaking change which fixes an issue)
  • New feature (non-breaking change which adds functionality)
  • Breaking change (fix or feature that would cause existing functionality to not work as expected)
  • Documentation update
  • Performance improvement
  • Refactoring

Related Issues

Fixes #(issue)

Checklist

  • I have performed a self-review of my code
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • My changes generate no new warnings
  • I have added tests that prove my fix is effective or that my feature works
  • New and existing unit tests pass locally with my changes
  • Any dependent changes have been merged and published

Testing

Additional Notes

recover_executor recovered the executor without enforcing EIP-2 low-s,
so a malleable high-s signature was accepted. Reject it there, and route
the SignerRecoverable impls for EvTxEnvelope and EvPooledTxEnvelope
through recover_executor so the check applies on both paths instead of
the duplicated inline recovery.

Adds a regression test for the high-s rejection.
@damiannolan
damiannolan requested a review from a team as a code owner October 27, 2026 09:58
@coderabbitai

coderabbitai Bot commented Oct 27, 2026 •

Copy link
Copy Markdown

Important

  • 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

Run configuration
  • Source mode: Auto
  • Repository: Unavailable
  • Branch: Unavailable
  • File: No configuration file from this repository applied
  • Commit: Unavailable
  • Layers: defaults
  • Review profile: CHILL
  • Plan: Advanced
  • Run ID: d3033063-293b-454f-ab7a-ef5a8fc52e96
  • Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@tac0turtle
tac0turtle merged commit 0aeb77b into main Oct 27, 2026
16 checks passed
@tac0turtle
tac0turtle deleted the fix/reject-high-s-executor-signature branch October 27, 2026 11:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants