Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic site

Assessment reports>Blackwing>Threat Model>disableWithdrawals

GeneralOverview

Findings

Informational (1)

DiscussionCentralization Front-run

Threat ModelWhat are threat models?aave_deployer.sol

vault.sol balance deployAssets deposit disableLPTransfers disableWithdrawals enableLPTransfers enableWithdrawals initialize lastDepositBlock registerAsset removeAssets setMinBlocksSinceLastDeposit updateDeployer withdraw

vault_token.sol

Audit ResultsSummary

Function: `disableWithdrawals()`

This function is used to disable withdrawals from the vault.

Branches and code coverage

Intended branches

Update the withdrawsEnabled to false.
Test coverage

Negative behavior

Reverts if caller is not the owner.
Negative test

Zellic © 2025Back to top ↑