Back Weex

Zodiac released a security incident report, stating that the ERC-1271 verification flaw had ...

Weex • June 20, 2026

The Zodiac team released a security incident analysis report regarding the impact on the Zodiac Roles Modifier, disclosing that the root cause of the vulnerability lies in a flaw in the ERC-1271 transaction signature verification logic: the system only determines the validity of the signature based on the returned "magic value" without verifying whether the call itself was successful, which may disguise a failed verification as a valid signature, bypassing the module authentication mechanism.

Where new wealth is made

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Zodiac Reveals ERC-1271 Signature Verification Flaw On June 20, 2026, the Zodiac team disclosed a security flaw in the ERC-1271 transaction signature verification logic. The vulnerability allows the system to determine signature validity based solely on a returned 'magic value' without confirming the success of the call itself. This oversight can lead to failed verifications being misrepresented as valid signatures, effectively bypassing the module's authentication mechanism. The flaw affects the Zodiac Roles Modifier, potentially exposing users to unauthorized access. No specific CVEs have been reported in the articles, and the current status of the vulnerability remains unclear. Security teams are advised to review their implementations of ERC-1271 to mitigate any risks associated with this flaw. 5 sources 52

Zodiac released a security incident report, stating that the ERC-1271 verification flaw had ...

The full story

Extracted Entities

CWE Weaknesses (1)

Tools (1)