EIP-712 domain separator missing chainId

Beefy Finance's assessment for RD-F-020 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No EIP-712 domain separator in vault contracts. BIFI token uses OZ 4.9.3 ERC20 which includes chainId in DOMAIN_SEPARATOR by default when EIP-2612 permit is active. OZ 4.9.3 standard implementation includes chainId. N-A for vault contracts; green for BIFI token.

Sources #

GitHub
beefy-contracts package.jsonpackage.json — @openzeppelin/contracts-upgradeable 4.9.3 (includes chainId in DOMAIN_SEPARATOR)retrieved 2026-05-16

Methodology #

Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol beefy factor RD-F-020 score green collected_at 2026-05-16 13:10:30