Zodiac Reports ERC-1271 Signature Verification Flaw Behind Roles Modifier Security Incident

Zodiac said it has published an analysis of a security incident affecting Zodiac Roles Modifier, attributing the issue to a flaw in ERC-1271 transaction signature verification logic. According to ChainCatcher, the system determined signature validity solely by checking the returned “magic value” and did not verify whether the underlying call succeeded. Zodiac said this design could allow a failed verification to appear as a valid signature, potentially bypassing the module’s authentication mechanism.