Bitget Zodiac Reveals ERC-1271 Signature Verification Flaw
Article Content
- •Zodiac disclosed a critical flaw in ERC-1271 signature verification logic.
- •The vulnerability allows failed verifications to be misrepresented as valid signatures.
- •No specific CVEs have been reported, but security teams should assess their systems.
On June 20, 2026, the Zodiac team disclosed a security flaw in the ERC-1271 transaction signature verification logic. The vulnerability allows the system to determine signature validity based solely on a returned 'magic value' without confirming the success of the call itself. This oversight can lead to failed verifications being misrepresented as valid signatures, effectively bypassing the module's authentication mechanism. The flaw affects the Zodiac Roles Modifier, potentially exposing users to unauthorized access. No specific CVEs have been reported in the articles, and the current status of the vulnerability remains unclear. Security teams are advised to review their implementations of ERC-1271 to mitigate any risks associated with this flaw.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (5)
Continue Reading
Volt Typhoon's Silent Train Network Targets US Critical Infrastructure The Chinese state-sponsored hacking group Volt Typhoon has been linked to a covert network called Silent Train, which has exploited at least four zero-day vulnerabilities over three years. This network utilizes rapidly rotating chains of compromised SOHO routers, IoT devices, and enterprise infrastructure to access… 
GitLab Issues Emergency Patch for Critical RCE Vulnerability GitLab has released emergency patches for a critical remote code execution vulnerability, CVE-2026-97229, affecting its Community and Enterprise Editions. This flaw, stemming from an integer overflow in the CI/CD regular expression compiler, allows unauthenticated attackers to execute arbitrary code via specially…