Skip to content

Conversation

@jeffsmale90
Copy link
Contributor

@jeffsmale90 jeffsmale90 commented Feb 4, 2026

Explanation

It's critical that the GatorPermissionController's Permission decoding logic is strict, and will not decode EIP-712 payload to a permission unless the payload exactly meets the expectations of that permission.

This PR adds adversarial tests that attempt to break the permission decoding, and adds additional validation for token permission types, enforcing relationships between token amounts, and timestamps.

References

Checklist

  • I've updated the test suite for new or updated code as appropriate
  • I've updated documentation (JSDoc, Markdown, etc.) for new or updated code as appropriate
  • I've communicated my changes to consumers by updating changelogs for packages I've changed
  • I've introduced breaking changes in this PR and have prepared draft pull requests for clients and consumer packages to resolve them

…ion to ensure that permission data invariants are not violated.
@jeffsmale90 jeffsmale90 changed the title Add adversarial tests for permission decoding. Add additional validation for token permission types. chore: add adversarial tests for permission decoding. Add additional validation for token permission types. Feb 10, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant