cannot claim with signature with wrong recipient (#88)

* cannot claim with signature with wrong recipient

* test that shows cannot claim with wrong signer

Author: oveddan

test/ZoraTokenCommunityClaim.t.sol

@@ -454,6 +454,41 @@ contract ZoraTokenCommunityClaimTest is Test {
         claim.claimWithSignature(signer, recipient, deadline, signature);
     }
 
+    function testCannotClaimWithWrongClaimTo() public {
+        uint256 privateKey = 0x1234;
+        address signer = vm.addr(privateKey);
+        address recipient = makeAddr("recipient");
+        address wrongRecipient = makeAddr("wrongRecipient");
+        uint96 amount = 100 * 1e18;
+
+        // Set allocation
+        address[] memory accounts = new address[](1);
+        uint96[] memory amounts = new uint96[](1);
+        accounts[0] = signer;
+        amounts[0] = amount;
+
+        bytes32[] memory compactAllocations = toCompactAllocations(accounts, amounts);
+
+        vm.prank(allocationSetter);
+        claim.setAllocations(compactAllocations);
+
+        vm.prank(admin);
+        claim.completeAllocationSetup(claimStart, originalTokenHolder);
+
+        // Warp to claim period
+        vm.warp(claimStart + 1);
+
+        // Create signature
+        uint256 deadline = block.timestamp + 1 days;
+        bytes32 digest = _getSignatureDigest(signer, recipient, deadline);
+        (uint8 v, bytes32 r, bytes32 s) = vm.sign(privateKey, digest);
+        bytes memory signature = abi.encodePacked(r, s, v);
+
+        // Claim with signature
+        vm.expectRevert(IZoraTokenCommunityClaim.InvalidSignature.selector);
+        claim.claimWithSignature(signer, wrongRecipient, deadline, signature);
+    }
+
     function testSmartWalletClaim() public {
         uint256 ownerPrivateKey = 0x1234;
         address owner = vm.addr(ownerPrivateKey);