ecrecover zero-address return unchecked
Sanctum's assessment for RD-F-019 — scored not_applicable on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.
Evidence summary #
ecrecover is an EVM precompile. Solana uses Ed25519 signature verification via the ed25519_program system program, which is binary (valid/invalid) with no zero-address return. Not applicable to Sanctum's Solana programs.
Sources #
- DocsSolana Program ModelSolana Ed25519 program — no ecrecover equivalent; structurally inapplicableretrieved 2026-05-04
Methodology #
Determine whether any `ecrecover` call result is used without a `!= address(0)` guard.
See the full factor methodology and distribution across all protocols →
rubric_version v1.7.0 protocol sanctum factor RD-F-019 score not_applicable collected_at 2026-05-04 18:49:23