Zellic - Audit Reports

The paymaster has a simple typo on the endpoint

There seems to be a typo in the endpoint configuration. The /healthz endpoint is expected to be hosted at /health based on the Dockerfile.

// Setup router
let app = Router::new().route("/healthz", get(health_check)).route(
    "/batch-claim",
    post(move |payload| handle_batch_claim(payload, batch_processor_contract.clone())),
);

# Add healthcheck
HEALTHCHECK --interval=30s --timeout=10s --start-period=5s --retries=3 \
    CMD curl -f http://localhost:3000/health || exit 1

Clique provided following response:

/healthz is the right endpoint.

We confirmed that this issue is resolved with the commit 0439d696.