Technical reference
ERC-1271: a contract decides whether a signature is valid
Smart-wallet signatures depend on validation logic and state, not only public-key recovery.
Os artigos de investigação e as referências são publicados em inglês. A navegação está disponível em sete idiomas.
The validation call
ERC-1271 defines isValidSignature for contract accounts. A verifier supplies a message hash and signature; the contract indicates acceptance with a specified return value. The contract may apply multisig rules or another authorisation scheme. Recovering an externally owned account from the signature is not an equivalent check.
Validity can depend on state
A signature accepted before a signer rotation may not be accepted afterwards. The verifier must consider the account's current validation rules and cannot treat an earlier successful call as permanent authorisation for unrelated future actions. Contract upgrades can also change how the same account validates requests.
An integration test worth keeping
Test the same request before and after changing the authorised signer set. Also test an incorrect contract address and a contract returning an unexpected value. These tests separate a real contract-signature check from code that merely assumes every wallet is controlled by one conventional private key.