Assessment reports>AccountRecoveryModule>Threat Model>removeExpiredGuardian

Function: removeExpiredGuardian(byte[32] guardian, address smartAccount)

This unpermissioned function can be called by anyone to remove an expired guardian.

Inputs

  • guardian

    • Control: Arbitrary.

    • Constraints: Must be an expired guardian for smartAccount.

    • Impact: Guardian to remove.

  • smartAccount

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Smart account from which to remove the guardian.

Branches and code coverage

Intended branches

  • Removes the expired guardian, adjusting the threshold if needed.

Negative behavior

  • Reverts if the guardian is not expired.

  • Reverts if the guardian is not set for smartAccount.

Zellic © 2024Back to top ↑