Zellic - Audit Reports

Assessment reports>Bond Protocol>Discussion>Assure token is active

Findings

DiscussionRedundant safeTransfer call Assure token is active Remove unchecked block Double-counted auctioneer

Threat ModelsWhat are threat models?BondAggregator.sol BondBaseCallback.sol BondBaseSDA.sol BondBaseTeller.sol BondFixedExpirySDA.sol BondFixedExpiryTeller.sol BondFixedTermSDA.sol BondFixedTermTeller.sol

Audit ResultsResults

Assure token is active

In redeem() from BondFixedTermTeller, there is no explicit check on whether the token exists; however, the function call would still revert if the token did not exist. We recommend adding a check such that the validity of a token is explicitly checked.

Remediation

Bond Labs acknowledged this finding and implemented a fix in commit cdc23696↗.