Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>IBC Eureka>Threat Model>Component: EurekaHandler
GeneralOverview
Findings
Critical (2)
High (1)
Medium (1)
Informational (1)
DiscussionCentralization risks and trust assumptionsOne app could be registered with multiple ports
Threat ModelComponent: cs-ics08-wasm-ethComponent: sp1-programsComponent: SP1ICS07TendermintComponent: ICS20TransferComponent: ICS26RouterComponent: EurekaHandler
Audit ResultsAssessment Results

Component: EurekaHandler

Function: transfer

This function initiates an ICS20 transfer.

Inputs

  • amount

    • Control: Fully controlled by caller.

    • Constraints: N/A.

    • Impact: The amount of tokens to transfer.

  • transferParams

    • Control: Fully controlled by caller.

    • Constraints: N/A.

    • Impact: These are the transfer parameters which contain the details about the transfer.

  • fees

    • Control: Fully controlled by caller.

    • Constraints: block.timestamp < fees.quoteExpiry.

    • Impact: This is the fees for the transfer.

Branches and code coverage

Intended branches

Negative behavior

Function: swapAndTransfer

Swaps the token to an output token and initiates an ICS20 transfer.

Inputs

  • swapInputToken

    • Control: Fully controlled by caller.

    • Constraints: N/A.

    • Impact: The input token to swap.

  • swapInputAmount

    • Control: Fully controlled by caller.

    • Constraints: N/A.

    • Impact: The amount of input tokens to swap.

  • swapCalldata

    • Control: Fully controlled by caller.

    • Constraints: N/A.

    • Impact: Call data for the swap function call.

  • transferParams

    • Control: Fully controlled by caller.

    • Constraints: N/A.

    • Impact: These are the transfer parameters which contain the details about the transfer.

  • fees

    • Control: Fully controlled by caller.

    • Constraints: block.timestamp < fees.quoteExpiry.

    • Impact: This is the fees for the transfer.

Branches and code coverage

Intended branches

Negative behavior

Function: lombardTransfer

This function initiates an ICS20 transfer for lbtc.

Inputs

  • amount

    • Control: Fully controlled by caller.

    • Constraints: N/A.

    • Impact: The amount of tokens to transfer.

  • transferParams

    • Control: Fully controlled by caller.

    • Constraints: N/A.

    • Impact: These are the transfer parameters which contain the details about the transfer.

  • fees

    • Control: Fully controlled by caller.

    • Constraints: block.timestamp < fees.quoteExpiry.

    • Impact: This is the fees for the transfer.

Branches and code coverage

Intended branches

Negative behavior

Zellic © 2025Back to top ↑