★ Bridge ecrecover checks result ≠ address(0)

Evidence summary #

Bridge signature verification checks ecrecover != address(0) | LayerZero v2 does NOT use ecrecover in the Wormhole/traditional sense. DVN verification works via hash commitments: DVNs call `ReceiveUln302.verify()` to store `payloadHash` indexed by their address. There is no `ecrecover` call that could return `address(0)`. The Wormhole bug class (unsigned message accepted because ecrecover(invalid_sig) = address(0)) does not apply to this architecture. However, the analogous risk — whether a D...

Sources #

Methodology #

Determine whether the bridge verifier code rejects `ecrecover` returns of `address(0)`.

See the full factor methodology and distribution across all protocols →