Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>d3-doma>Threat Model>Function: bulkBurn(uint256[] calldata tokenIds, string calldata correlationId)
GeneralOverview
Findings
Critical (3)
Medium (1)
Low (6)
Informational (2)
Threat ModelWhat are threat models?DomaForwarder.solDomaRecordProxyFacet.solDomaRecordRegistrarClaimFacet.solDomaRecordRegistrarFacet.solERC7786GatewayReceiver.solERC7786GatewaySource.solMarketplace.sol
OwnershipToken.solFunction: _beforeTokenTransfer(address from, address to, uint256 firstTokenId, uint256)Function: bulkBurn(uint256[] calldata tokenIds, string calldata correlationId)Function: bulkMint(OwnershipTokenMintInfo[] calldata names, string calldata correlationId)Function: renew(uint256 tokenId, uint256 expiresAt, string calldata correlationId)
ProxyDomaRecord.sol
Audit ResultsAssessment Results

Function: bulkBurn(uint256[] calldata tokenIds, string calldata correlationId)

This function burns multiple tokens in a single transaction by iterating through token IDs, recording owners, and emitting burn events. Only minters can execute this function, and user-initiated burns are blocked.

Inputs

  • tokenIds

    • Control: Full.

    • Constraints: Each token ID is validated via ownerOf(tokenId), which reverts if the token does not exist.

    • Impact: Array of token IDs to burn — allows batch processing for gas efficiency.

  • correlationId

    • Control: Full.

    • Constraints: N/A.

    • Impact: Used for off-chain tracking and correlation with burn operations.

Branches and code coverage (including function calls)

Intended branches

Negative behavior

Zellic © 2025Back to top ↑