Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic siteBack

Assessment reports>AccountRecoveryModule>Threat Model>setSecurityDelay

GeneralOverview

Findings

Informational (1)

DiscussionGuardians could prevent account recovery

Threat ModelWhat are threat models?

AccountRecoveryModule.sol addGuardian changeGuardianParams initForSmartAccount removeExpiredGuardian removeGuardian renounceRecoveryRequest replaceGuardian setSecurityDelay setThreshold submitRecoveryRequest validateUserOp

Audit ResultsSummary

AppendixMissing selector validation POC

Function: `setSecurityDelay(uint48 newSecurityDelay)`

This function can be called to set the security delay.

Inputs

newSecurityDelay
- Control: Arbitrary.
- Constraints: None.
- Impact: New security delay.

Branches and code coverage

Intended branches

Sets the security delay.
Test coverage

Zellic © 2025Back to top ↑