Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Chainflip Backend>Threat Model>Function: schedule_swap_from_contract
GeneralOverview
Findings
Critical (1)
High (1)
Medium (1)
DiscussionLack of broker fee limitsERC-20 transfer reversions result in stuck fundsType conversion could lead to fund loss
Threat ModelWhat are threat models?1-cf-lp2-cf-pools
3-cf-swappingPallet: cf-swappingFunction: request_swap_deposit_addressFunction: withdrawFunction: schedule_swap_from_contractFunction: ccm_depositFunction: register_as_brokerFunction: set_minimum_swap_amount
4-cf-witnesser5-engine
Audit ResultsSummary

Function: schedule_swap_from_contract

This function simply schedules a swap with user-specified parameters. It is intended to be called by the witnesser.

The destination address must be on the same chain as the destination asset, and it must be a valid address.

If the input asset amount is less than the configured MinimumSwapAmount pallet storage value for that asset, the funds are confiscated and locked in the protocol. Otherwise, the swap is scheduled.

Zellic © 2024Back to top ↑