HOPR is an open incentivized mixnet which enables privacy-preserving point-to-point data exchange. HOPR is similar to Tor but actually private, decentralized and economically sustainable.
In solidity constant keccak variables are treated as expressions, not constants.
Attack Scenario
Standard solidity practice is performing all hashing assignment in the constructor or else the keccak256 operation being performed whenever the variable is used.
Github username: -- Submission hash (on-chain): 0x6959e15452f5e8f1bac654463d2ec1022d095606de21b36549737603fa5e8569 Severity: low
Description: Description
In solidity constant keccak variables are treated as expressions, not constants.
Attack Scenario
Standard solidity practice is performing all hashing assignment in the constructor or else the keccak256 operation being performed whenever the variable is used.
Attachments https://github.com/hoprnet/hoprnet/blob/master/packages/ethereum/contracts/src/Channels.sol#L94
Recommendation
Declare
TOKENS_RECIPIENT_INTERFACE_HASH
as immutable and carryout the hashing assignment at time of deployment through the constructors.