Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Anzen and protocol-v2>Threat Model>Function: broadcastUserPosition(address user, uint256[] calldata chainIds)
GeneralOverview
Findings
Medium (3)
Low (3)
Informational (4)
DiscussionLack of test flows
Threat ModelWhat are threat models?AnzenGaugeControllerBaseUpg.solAnzenVotingControllerUpg.solLockedUsdzMarket.solLockingToken.solMainnetUSDzMarket.solStakePool.sol
VotingEscrowAnzenMainchain.solFunction: broadcastTotalSupply(uint256[] calldata chainIds)Function: broadcastUserPosition(address user, uint256[] calldata chainIds)Function: increaseLockPosition(uint128 additionalAmountToLock, uint128 newExpiry)Function: increaseLockPositionAndBroadcast(uint128 additionalAmountToLock, uint128 newExpiry, uint256[] calldata chainIds)Function: withdraw()
VotingEscrowAnzenSidechain.solVotingResultBroadcaster.sol
Audit ResultsAssessment Results

Function: broadcastUserPosition(address user, uint256[] calldata chainIds)

The function broadcasts the updated user position and total supply to specified chain IDs.

Inputs

  • user

    • Control: Arbitrary.

    • Constraints: Must not be the zero address.

    • Impact: The parameter identifies the user whose position to broadcast.

  • chainIds

    • Control: Arbitrary.

    • Constraints: Must be nonempty and supported chain IDs.

    • Impact: The parameter specifies the chains to broadcast the update.

Branches and code coverage

Intended branches

  • Update and broadcast the user's veAnzen position and total supply to specified chains.

Negative behavior

  • Revert if chainIds is empty.

  • Revert if elements of chainIds are not in destinationContracts.

Zellic © 2025Back to top ↑