malleable-signatures

The malleable-signatures repository provides a proof of concept (PoC) that demonstrates signature malleability attacks using compact signatures within the Ethereum ecosystem. It highlights vulnerabilities in OpenZeppelin’s ECDSA library version 4.6 that are exploitable through signature malleability, emphasizing the necessity to avoid using signatures as unique identifiers due to their inherent non-uniqueness. Key features include showcasing the vulnerability and its remediation in later library versions, along with a detailed explanation of the underlying cryptographic principles involved.