Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic site

Assessment reports>AccountRecoveryModule>Threat Model>renounceRecoveryRequest

GeneralOverview

Findings

DiscussionGuardians could prevent account recovery

Threat ModelWhat are threat models?

AccountRecoveryModule.sol addGuardian changeGuardianParams initForSmartAccount removeExpiredGuardian removeGuardian renounceRecoveryRequest replaceGuardian setSecurityDelay setThreshold submitRecoveryRequest validateUserOp

Audit ResultsSummary

AppendixMissing selector validation POC

Function: `renounceRecoveryRequest()`

This function can be called to cancel a recovery request.

Branches and code coverage

Intended branches

Cancels (deletes) the pending recovery request.
Test coverage

Zellic © 2024Back to top ↑