ghostchain/ghost-dao-contracts
5
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

https://ghostforum.org/t/high-gatekeeper-verify-signature-replay-one-signature-mints-phantomrefund-ghst-forever-permissionless-inflation/134

Browse Source 
Signed-off-by: Uncle Fatso <uncle.fatso@ghostchain.io>
This commit is contained in:
Uncle Fatso 2026-10-10 19:08:47 +03:00
parent b87dff4c7a
commit d3d6912590
Signed by: f4ts0
GPG Key ID: 565F4F2860226EBB
2 changed files with 10 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
src/Gatekeeper.sol
View File

@ -137,6 +137,15 @@ contract Gatekeeper is IGatekeeper, Weaver, ReentrancyGuard {
bool validSignature = Verifier.verifyGhost(call, px, rx, s);
if (!validSignature) revert BadSignature();
bytes4 selector = bytes4(call[:4]);
if (
selector != this.recall.selector &&
selector != this.rotate.selector &&
selector != this.govern.selector
) {
revert InvalidSelector();
}
(bool success,) = address(this).call(call);
if (!success) revert ExecutionReverted();

1
src/interfaces/IGatekeeper.sol
View File

@ -8,6 +8,7 @@ interface IGatekeeper {
error BadSignature();
error NotGatekeeper();
error AlreadyExecuted();
error InvalidSelector();
error InvalidCalldata();
error InvalidPublicKey();
error NonExistentAmount();