Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Cove>Threat Model>fallbackRedeemTrigger
GeneralOverview
Findings
Critical (2)
High (3)
Medium (2)
Low (1)
Informational (1)
DiscussionTransparent intent of redeemal might lead to unintended consequencesShares can round down to zeroWeights can pass uncheckedDenial-of-service risk where attackers can disrupt rebalance process with BasketManagerUtils.completeRebalance() functionality
Threat ModelWhat are threat models?AnchoredOracle.solAssetRegistry.solBasketManagerUtils.sol
BasketToken.solcancelDepositRequestcancelRedeemRequestclaimFallbackSharesclaimFallbackSharesdepositdepositfallbackRedeemTriggerfulfillDepositfulfillRedeemmintmintprepareForRebalanceproRataRedeemredeemrequestDepositrequestRedeemsetBitFlagsetOperatorwithdraw
CoWSwapAdapter.solCoWSwapClone.solFeeCollector.solManagedWeightStrategy.sol
Audit ResultsAssessment Results

Function: fallbackRedeemTrigger()

This function allows the basket manager to trigger a fallback redemption in the event of a failed redemption fulfillment. It allows users to claim their shares back for a redemption in the future and advances the redemption epoch.

Branches and code coverage

Intended branches

  • Update redeemRequest.

  • Set fallbackTriggered to true.

Negative behavior

  • Revert if the caller is not the basket manager.

  • Revert if the current request has already been fallbacked.

  • Revert if the current request has already been fulfilled.

  • Revert if the current request has no pending redemptions.

Zellic © 2025Back to top ↑