Known-exploit function-selector replay
Across Protocol's assessment for RD-F-095 — scored gray on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
Known-exploit function-selector replay | Partially | No prior Across exploits exist from which a replay template could be constructed. The August 2024 OZ audit critical finding (Arbitrum CustomGasToken adapter) was patched before deployment. The unresolved EIP-712 replay vulnerability flagged in February 2026 Deposit Flow audit is a potential future replay template if left unpatched. Current state: no known active replay selector pattern. | Specific selector sequence and calldata shape matchi...
Sources #
- Curator noteExtracted from 06-realtime-intel.md — RD-F-095; no URL citedretrieved 2026-04-28
Methodology #
Detect whether a call-pattern matches a known-exploit replay template (specific selector sequence and calldata shape) against this protocol.
See the full factor methodology and distribution across all protocols →