Assessment reports>InfiniCard Vault>Threat Model>withdrawFromStrategy

Function: withdrawFromStrategy(address strategy, uint256 amount, bytes redeemInfo)

This function allows the strategy operator to withdraw a specified amount from a strategy back to the vault.

Inputs

  • strategy

    • Control: Controlled by the caller with STRATEGY_OPERATOR_ROLE.

    • Constraints: None.

    • Impact: the strategy from which to withdraw funds.

  • amount

    • Control: Controlled by the caller with STRATEGY_OPERATOR_ROLE.

    • Constraints: None.

    • Impact: The amount to withdraw from the strategy.

  • redeemInfo

    • Control: Controlled by the caller with STRATEGY_OPERATOR_ROLE.

    • Constraints: None.

    • Impact: Additional data passed to the strategy when redeeming tokens.

Branches and code coverage

Intended branches

  • Withdraws the amount of tokens from the strategy vault.

Negative behavior

  • Reverts if the caller does not have STRATEGY_OPERATOR_ROLE.

Function call analysis

  • _withdraw_from_strategy(strategy, amount, redeemInfo)

    • What is controllable? strategy, amount, and redeemInfo.

    • If the return value is controllable, how is it used and how can it go wrong? N/A.

    • What happens if it reverts, reenters or does other unusual control flow? If this reverts, the entire transaction would revert — no reentrancy scenario.

Zellic © 2025Back to top ↑