Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>d3-doma>Threat Model>Function: eoiImport()
GeneralOverview
Findings
Critical (3)
Medium (1)
Low (6)
Informational (2)
Threat ModelWhat are threat models?DomaForwarder.solDomaRecordProxyFacet.solDomaRecordRegistrarClaimFacet.sol
DomaRecordRegistrarFacet.solFunction: approveTokenization()Function: complianceChangeLockStatus()Function: complianceDetokenize()Function: eoiImport()Function: nameTokenize()Function: registrarDelete()Function: registrarDetokenize()Function: rejectTokenization()Function: renew()Function: update()Function: updateDsKeys()Function: updateNameservers()
ERC7786GatewayReceiver.solERC7786GatewaySource.solMarketplace.solOwnershipToken.solProxyDomaRecord.sol
Audit ResultsAssessment Results

Function: eoiImport()

This function is used to import details for an EOI domain name without tokenizing it.

Inputs

  • importData

    • Control: Fully controlled.

    • Constraints: N/A.

    • Impact: This array contains structures that contain details about the EOI domain name being imported.

  • correlationId

    • Control: Not controlled.

    • Constraints: This is hardcoded by the ProxyDomaRecord contract.

    • Impact: This is a hash of the current block number, the chain ID, and a nonce on the remote chain.

Branches and code coverage (including function calls)

Intended branches

Negative behavior

Zellic © 2025Back to top ↑