-
Notifications
You must be signed in to change notification settings - Fork 41
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Add feeRecipient or taker signature to prove ownership #2
Comments
what about in cases where these addresses are smart contracts? |
Can probably just sign with the address that deployed the fee_recipient contract, no? |
hm.. I guess so, but the deployer is not always the "owner" of the contract, for example, a fees splitting contract that has some voting mechanism to select fee receivers that initially disburses fees to the some set of addresses including the deployer but over time votes the deploying address out. |
I like this idea. |
feeRecipientAddress to lowercase
OpenRelay uses a contract factory to deploy our affiliate contracts. The fee recipients are contracts, and thus have no keys with which to sign messages, and they were deployed by a contract, so it has no keys with to sign messages. We don't consider affiliate addresses to be "our" addresses (our affiliates are welcome to report them as their own), but if there were a signature element it would need to go back to whoever submitted the transaction to create the contract, even though the contract was actually created via a contract call. We have attempted to address this by adding a "relayerName" property to our affiliate contracts, so people can look them up easily even if they're not here. |
Yeah, that's a fair point -- this is partially why we added the endpoint for fee recipient addresses in SRA V2. The information in this repo is intended to be helpful, not critical, and I don't really see potential fund loss or vulnerabilities coming from an attack here. |
No description provided.
The text was updated successfully, but these errors were encountered: