Assessment reports>Hyperliquid>Threat Models>finalizeValidatorSetUpdate

Function: finalizeValidatorSetUpdate()

This function can be called to finalize a validator set update, making it effective.

Branches and code coverage (including function calls)

Intended branches

  • Check that an update is pending and that the dispute period has elapsed, then finalizes the update by updating various storage variables.

Negative behavior

  • Reverts if no update is pending.

  • Reverts if the dispute period has not elapsed.

Function call analysis

  • rootFunction -> checkDisputePeriod(pendingValidatorSetUpdate.updateTime, pendingValidatorSetUpdate.updateBlockNumber)

    • What is controllable? Nothing directly.

    • If return value controllable, how is it used and how can it go wrong? N/A.

    • What happens if it reverts, reenters, or does other unusual control flow? Reverts bubble up; reentrancy is not possible (no external calls).

  • rootFunction -> finalizeValidatorSetUpdateInner()

    • What is controllable? N/A.

    • If return value controllable, how is it used and how can it go wrong? N/A.

    • What happens if it reverts, reenters, or does other unusual control flow? Reverts bubble up; reentrancy is not possible (no external calls).

Zellic © 2025Back to top ↑