Skip to content

Commit 322011b

Browse files
Update docs/sdk/authentication/authenticating-siws.md
Co-authored-by: awisniew207 <awisniew@uoregon.edu>
1 parent 5cca39f commit 322011b

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

docs/sdk/authentication/authenticating-siws.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -2,7 +2,7 @@
22

33
Deriving a Solana public key (aka. address) from a signed message works slightly differently than when using Lit to authenticate signed messages on EVM chains.
44

5-
Currently the Lit nodes support deriving an address from a Sign-in With Ethereum Message (EIP-5573), while also validating what was signed using the [EIP-5573 specification](https://eips.ethereum.org/EIPS/eip-5573) (eg. the signed message hasn't expired and has the correct format).
5+
Currently the Lit nodes support deriving an address from a Sign-in With Ethereum Message (EIP-5573), while also validating what was signed using the [EIP-5573 specification](https://eips.ethereum.org/EIPS/eip-5573) (e.g. the signed message hasn't expired and has the correct format).
66

77
However, the Lit nodes built-in support for authenticating signed Solana messages is limited to just deriving the Solana public key from the signed data, but they do **not** perform any validation on the what was signed. This means that any data signed by a specific Solana wallet will be accepted, which opens the door for signature malleability and replay attacks.
88

0 commit comments

Comments
 (0)