Zellic - Audit Reports

Assessment reports>Chainflip Backend>Discussion>ERC-20 transfer reversions result in stuck funds

Findings

DiscussionLack of broker fee limits ERC-20 transfer reversions result in stuck funds Type conversion could lead to fund loss

Threat ModelWhat are threat models?1-cf-lp 2-cf-pools 3-cf-swapping 4-cf-witnesser 5-engine

Audit ResultsSummary

ERC-20 egress transfer reversions result in stuck funds

Note that if an egress ERC-20 transfer reverts for any reason (the receiver is blacklisted, the receiver contract's fallback reverts, etc.), the funds will be permanently locked in the Chainflip protocol.