Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>d3-doma>Threat Model>Function: tokenTransfer(uint256 tokenId, address from, address to)
GeneralOverview
Findings
Critical (3)
Medium (1)
Low (6)
Informational (2)
Threat ModelWhat are threat models?DomaForwarder.solDomaRecordProxyFacet.solDomaRecordRegistrarClaimFacet.solDomaRecordRegistrarFacet.solERC7786GatewayReceiver.solERC7786GatewaySource.solMarketplace.solOwnershipToken.sol
ProxyDomaRecord.solFunction: bridge(uint256 tokenId, bool isSynthetic, string calldata targetChainId, string calldata targetOwnerAddress)Function: changeLockStatus(string calldata tokenId, bool isSynthetic, bool isTransferLocked, string calldata correlationId)Function: claimOwnership(uint256 tokenId, bool isSynthetic, ProofOfContactsVoucher calldata proofOfContactsVoucher, bytes calldata signature)Function: detokenize(string calldata tokenId, bool isSynthetic, string calldata claimedBy, string calldata correlationId)Function: detokenizeUnchecked(string calldata tokenId, bool isSynthetic, string calldata correlationId)Function: mintOwnershipTokens(uint256 registrarIanaId, OwnershipTokenInfo[] calldata tokens, string calldata ownerAddress, string calldata correlationId)Function: renew(string calldata tokenId, bool isSynthetic, uint256 expiresAt, string calldata correlationId)Function: requestDetokenization(uint256 tokenId, bool isSynthetic)Function: requestTokenization(TokenizationVoucher calldata voucher, bytes calldata signature)Function: tokenTransfer(uint256 tokenId, address from, address to)
Audit ResultsAssessment Results

Function: tokenTransfer(uint256 tokenId, address from, address to)

This function handles cross-chain ownership record updates when tokens are transferred between addresses on the tokenization chain. It is called by the OwnershipToken contract during transfers to synchronize ownership changes with Doma chain via _relayMessage.

Inputs

  • tokenId

    • Control: Semicontrolled.

    • Constraints: N/A (validated by calling the OwnershipToken contract).

    • Impact: Identifies the specific token being transferred for the cross-chain record update.

  • from

    • Control: Not controlled.

    • Constraints: N/A (validated by calling the OwnershipToken contract).

    • Impact: Source address of the token transfer for the cross-chain ownership update.

  • to

    • Control: Full.

    • Constraints: N/A (validated by calling the OwnershipToken contract).

    • Impact: Destination address of the token transfer for the cross-chain ownership update.

Branches and code coverage (including function calls)

Intended branches

Negative behavior

Zellic © 2025Back to top ↑