Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>EigenLayer DVN>Threat Model>Function: queueRequest(string memory _description)
GeneralOverview
Threat ModelWhat are threat models?
1-LayerZeroSlasherFunction: queueRequest(string memory _description)Function: refundRequest(uint256 _id, string memory _response)Function: cancelRequest(uint256 _id, string memory _response)Function: fulfillRequest(uint256 _id, IStrategy[] memory _strategies, uint256[] memory _wadsToSlash, string memory _response)
2-LayerZeroAVSRegistrar
Audit ResultsAssessment Results

Function: queueRequest(string memory _description)

This function registers a request and starts the bonding period. The APPROVAL_WINDOW (bonding period duration), bondToken, and bondAmount are set by the owner in advance.

Inputs

  • _description

    • Validation: None. This was fixed in before our audit period began but after the scope was set.

    • Impact: Stored in the request struct.

  • msg.sender

    • Validation: None.

    • Impact: Stored as the bonder in the request struct.

Branches and code coverage

Intended branches

Function call analysis

  • queueRequest -> safeTransferFrom

    • External/internal? External.

    • Argument control? Only the from address.

    • Impact: Transfers the bond amount from the bonder to the contract.

Zellic © 2025Back to top ↑