Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic siteBack

Assessment reports>Cega>Threat Models>Function: setTradeData(address vaultAddress, uint256 _tradeDate, uint256 _tradeExpiry, uint256 _aprBps, uint256 _tenorInDays)

GeneralOverview

Findings

Informational (2)

DiscussionCentralization risks Using non-ERC20 token standards Impossibility of reentrancy in the queue-processing functions

Threat ModelsWhat are threat models?CegaState.sol

FCNProduct.sol Function: addOptionBarrier(address vaultAddress, OptionBarrier optionBarrier)Function: addToDepositQueue(uint256 amount, address receiver)Function: addToWithdrawalQueue(address vaultAddress, uint256 amountShares, address receiver)Function: calculateCurrentYield(address vaultAddress)Function: calculateVaultFinalPayoff(address vaultAddress)Function: checkBarriers(address vaultAddress)Function: createVault(string _tokenName, string _tokenSymbol, uint256 _vaultStart)Function: openVaultDeposits(address vaultAddress)Function: processDepositQueue(address vaultAddress, uint256 maxProcessCount)Function: processWithdrawalQueue(address vaultAddress, uint256 maxProcessCount)Function: receiveAssetsFromCegaState(address vaultAddress, uint256 amount)Function: removeOptionBarrier(address vaultAddress, uint256 index, string _asset)Function: removeVault(address vaultAddress)Function: rolloverVault(address vaultAddress)Function: setIsDepositQueueOpen(bool _isDepositQueueOpen)Function: setKnockInStatus(address vaultAddress, bool newState)Function: setManagementFeeBps(uint256 _managementFeeBps)Function: setMaxDepositAmountLimit(uint256 _maxDepositAmountLimit)Function: setTradeData(address vaultAddress, uint256 _tradeDate, uint256 _tradeExpiry, uint256 _aprBps, uint256 _tenorInDays)Function: setVaultMetadata(address vaultAddress, FCNVaultMetadata metadata)Function: setVaultStatus(address vaultAddress, VaultStatus _vaultStatus)Function: setYieldFeeBps(uint256 _yieldFeeBps)Function: updateOptionBarrierOracle(address vaultAddress, uint256 index, string _asset, string newOracleName)

Function: `setTradeData(address vaultAddress, uint256 _tradeDate, uint256 _tradeExpiry, uint256 _aprBps, uint256 _tenorInDays)`

Sets a vault's trade-related metadata.

Inputs

vaultAddress
- Control: Fully controlled.
- Constraints: The vault's status must be set to NotTraded.
- Impact: This vault's metadata is updated.
_tradeDate
- Control: Fully controlled.
- Constraints: N/A.
- Impact: Used to update the vault's metadata.
_tradeExpiry
- Control: Fully controlled.
- Constraints: Must not be set to 0.
- Impact: Used to update the vault's metadata.
_aprBps
- Control: Fully controlled.
- Constraints: N/A.
- Impact: Used to update the vault's metadata.
_tenorInDays
- Control: Fully controlled.
- Constraints: N/A.
- Impact: Used to update the vault's metadata.

Branches and code coverage (including function calls)

Intended branches

Should update the vault's metadata correctly.
Test coverage

Negative behaviour

Should revert if the vault's status it not set to NotTraded.
Negative test
Should revert if the _tradeExpiry argument is set to 0.
Negative test
Should revert if called by a non--trader-admin role.
Negative test

Zellic © 2025Back to top ↑