Zellic - Audit Reports

Assessment reports>Chainflip Backend>Threat Model>Function: `register_lp_account`

Findings

DiscussionLack of broker fee limits ERC-20 transfer reversions result in stuck funds Type conversion could lead to fund loss

Threat ModelWhat are threat models?

1-cf-lp Pallet: cf-lp Function: `request_liquidity_deposit_address`Function: `withdraw_asset`Function: `register_lp_account`Function: `register_liquidity_refund_address`

2-cf-pools 3-cf-swapping 4-cf-witnesser 5-engine

Audit ResultsSummary

Function: `register_lp_account`

The register_lp_account function can be used to register an account as a liquidity provider. The function is unpermissioned; therefore, any account can become a liquidity provider.

The function simply checks that the caller has signed the extrinsic and assigns the liquidity-provider role to the corresponding account ID.

Function: register_lp_account

Function: `register_lp_account`