Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>d3-doma>Threat Model>Function: bridge()
GeneralOverview
Findings
Critical (3)
Medium (1)
Low (6)
Informational (2)
Threat ModelWhat are threat models?DomaForwarder.sol
DomaRecordProxyFacet.solFunction: bridge()Function: claimOwnership()Function: completeDetokenization()Function: initiateTokenization()Function: ownerDetokenize()Function: tokenTransfer()
DomaRecordRegistrarClaimFacet.solDomaRecordRegistrarFacet.solERC7786GatewayReceiver.solERC7786GatewaySource.solMarketplace.solOwnershipToken.solProxyDomaRecord.sol
Audit ResultsAssessment Results

Function: bridge()

This function is called when an ownership token is being bridged from one remote chain to another remote chain.

Inputs

  • tokenId

    • Control: Semicontrolled.

    • Constraints: The user performing the bridging must have this token existing in their wallet.

    • Impact: The token ID of the ownership token being detokenized.

  • targetChainId

    • Control: Semicontrolled.

    • Constraints: The target chain ID must be supported.

    • Impact: This is the chain ID of the target chain.

  • targetOwnerAddress

    • Control: Fully controlled.

    • Constraints: N/A.

    • Impact: This is the address on the target chain that will receive the token.

  • correlationId

    • Control: Not controlled.

    • Constraints: This is hardcoded by the ProxyDomaRecord contract.

    • Impact: This is a hash of the current block number, the chain ID, and a nonce on the remote chain.

Branches and code coverage (including function calls)

Intended branches

Negative behavior

Zellic © 2025Back to top ↑