Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Chainflip Backend>Threat Model>Function: `new_pool`
GeneralOverview
Findings
Critical (1)
High (1)
Medium (1)
DiscussionLack of broker fee limitsERC-20 transfer reversions result in stuck fundsType conversion could lead to fund loss
Threat ModelWhat are threat models?1-cf-lp
2-cf-poolsPallet: cf-poolsFunction: `update_buy_interval`Function: `update_pool_enabled`Function: `new_pool`Function: `update_range_order`Function: `set_range_order`Function: `update_limit_order`Function: `set_limit_order`Function: `set_pool_fees`Function: `on_initialize`
3-cf-swapping4-cf-witnesser5-engine
Audit ResultsSummary

Function: new_pool

The new_pool function can be used by governance to create a new pool for a pair of assets. After ensuring that the origin of the call is governance and that a pool for the given pair of assets does not already exist, the function creates a new pool using the parameters (fee and initial price) specified by the caller.

Finally, an event signalling the creation of the new pool is deposited.

Zellic © 2024Back to top ↑