Commit 9227bf0
fix(audit): restore Uniswap text in NFTSVG provenance signature
Bailsec Issue_05 (Informational). The natspec block in generateSVG()
carries a signed-provenance message originally produced by the upstream
Uniswap author (0xe8ab...c163). The signature is bound to the literal
bytes of the signed message; switching the message text from "Uniswap"
to "Lista" while retaining the same signature broke the chain — the sig
no longer proves anything about the displayed statement.
Reverts the message back to "Uniswap" so the retained signature stays
honest about who signed what. The block is a Solidity comment only and
has no runtime effect.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>1 parent 16c644c commit 9227bf0
1 file changed
Lines changed: 1 addition & 1 deletion
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
46 | 46 | | |
47 | 47 | | |
48 | 48 | | |
49 | | - | |
| 49 | + | |
50 | 50 | | |
51 | 51 | | |
52 | 52 | | |
| |||
0 commit comments