ecrecover zero-address return unchecked

Venus Protocol's assessment for RD-F-019 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

No ecrecover usage in core lending contracts (VToken.sol, Diamond.sol). GovernorBravo uses EIP-712 for vote-by-signature with standard pattern. No ecrecover-zero-address finding in any audit report.

Sources #

GitHub
GovernorBravoDelegate.sol — castVoteBySig EIP-712GovernorBravo vote-by-sigretrieved 2026-04-28
GitHub
VTokenInterfaces.sol — no ecrecover usageVTokenInterfaces.sol — no ecrecoverretrieved 2026-04-28

Methodology #

Determine whether any `ecrecover` call result is used without a `!= address(0)` guard.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol venus factor RD-F-019 score green collected_at 2026-04-28 18:30:49