Assessment reports>Cove>Threat Model>cancelDepositRequest

Function: cancelDepositRequest()

This function cancels a pending deposit request and transfers the assets back to the user.

Branches and code coverage

Intended branches

  • Update depositRequest.

  • Transfer pendingDeposit assets to the user.

Negative behavior

  • Revert if the current request has no pending deposits.

Function call analysis

  • SafeERC20.safeTransfer(IERC20(this.asset()), msg.sender, pendingDeposit)

    • What is controllable? Can increase pendingDeposit by depositing more assets.

    • If the return value is controllable, how is it used and how can it go wrong? N/A.

    • What happens if it reverts, reenters or does other unusual control flow? N/A.

Zellic © 2025Back to top ↑