Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>d3-doma>Threat Model>Function: completeDetokenization()
GeneralOverview
Findings
Critical (3)
Medium (1)
Low (6)
Informational (2)
Threat ModelWhat are threat models?DomaForwarder.sol
DomaRecordProxyFacet.solFunction: bridge()Function: claimOwnership()Function: completeDetokenization()Function: initiateTokenization()Function: ownerDetokenize()Function: tokenTransfer()
DomaRecordRegistrarClaimFacet.solDomaRecordRegistrarFacet.solERC7786GatewayReceiver.solERC7786GatewaySource.solMarketplace.solOwnershipToken.solProxyDomaRecord.sol
Audit ResultsAssessment Results

Function: completeDetokenization()

This function is called as part of the detokenization flow from a remote chain.

Inputs

  • tokenId

    • Control: Semicontrolled.

    • Constraints: The user claiming ownership must have this token existing in their wallet.

    • Impact: The token ID of the ownership token being detokenized.

  • correlationId

    • Control: Not controlled.

    • Constraints: This is hardcoded by the ProxyDomaRecord contract.

    • Impact: This is a hash of the current block number, the chain ID, and a nonce on the remote chain.

Branches and code coverage (including function calls)

Intended branches

Negative behavior

Zellic © 2025Back to top ↑