Assessment reports>Cove>Threat Model>setSponsor

Function: setSponsor(address basketToken, address sponsor)

This function is used to set the sponsor for a given basket token.

Inputs

  • basketToken

    • Control: Fully controlled by the admin.

    • Constraints: basketToken must have the _BASKET_TOKEN_ROLE role.

    • Impact: The basket token to set the sponsor for.

  • sponsor

    • Control: Fully controlled by the admin.

    • Constraints: None.

    • Impact: The new sponsor address.

Branches and code coverage

Intended branches

  • Update basketTokenSponsors for the given basketToken with the new sponsor.

Negative behavior

  • Revert if basketToken does not have the _BASKET_TOKEN_ROLE role.

Function call analysis

  • this._checkIfBasketToken(basketToken) -> this._basketManager.hasRole(FeeCollector._BASKET_TOKEN_ROLE, token)

    • What is controllable? basketToken.

    • If the return value is controllable, how is it used and how can it go wrong? N/A.

    • What happens if it reverts, reenters or does other unusual control flow? N/A.

Zellic © 2025Back to top ↑