EIP-712 domain separator missing chainId

Yearn Finance's assessment for RD-F-020 — scored green on the v1.7.0 rubric. The evidence below is the curator's reasoning for this score.

Evidence summary #

V3 VaultV3.vy implements ERC-4626 permit with Vyper's built-in EIP-712 domain separator which includes CHAIN_ID. V2 core Vault.vy similarly includes chain_id in domain separator per Vyper EIP-712 implementation. ChainSecurity audit did not flag domain separator issues. No evidence of missing chainId.

Sources #

GitHub
VaultV3.vy EIP-712 domain separator — includes CHAIN_IDVaultV3.vy — EIP-712 domain separator includes chain_idretrieved 2026-05-16

Methodology #

Determine whether the EIP-712 domain separator struct omits the `chainId` field, allowing cross-chain replay.

See the full factor methodology and distribution across all protocols →

rubric_version v1.7.0 protocol yearn-finance factor RD-F-020 score green collected_at 2026-05-16 08:34:32