SCSVS-CRYPTO-1¶

S6.1 Key Management¶

Ensure secure handling and storage of private keys and implement robust signature verification processes to prevent unauthorized access and actions.

SCSVS VR ID	Requirement	L2	L3
S6.1.A1	Verify that the ecrecover() function handles malformed inputs correctly and does not return invalid data.	✓	✓
S6.1.A2	Ensure that signature verification mechanisms are robust against signature malleability and replay attacks, particularly by using nonces or hashed messages rather than relying solely on the signature itself.	✓	✓
S6.1.A3	Verify that SignatureChecker.isValidSignatureNow handles edge cases properly and does not revert unexpectedly, considering the ABI decoding issues introduced in Solidity 0.8.	✓	✓
S6.1.A4	Ensure that all signatures are checked thoroughly to prevent unauthorized transactions or actions due to weak or improperly managed signature validation.	✓	✓
S6.1.A5	Validate that signature protection mechanisms are up-to-date and resistant to signature malleability attacks by avoiding outdated libraries and practices.	✓	✓

SCSVS VR ID	Requirement	L2	L3
S6.1.B1	Verify that multi-signature wallets require a predefined number of signatures before executing any transaction.	✓	✓
S6.1.B2	Ensure that the multi-signature wallet logic is resistant to replay attacks.	✓	✓
S6.1.B3	Verify that the process of adding or removing signatories from the multi-signature wallet is secure and controlled.	✓	✓