Zellic - Audit Reports

Assessment reports>Initia>Discussion>Bridge executor minting power

Findings

DiscussionGeneral Discussion Improve AMM tests Bridge executor minting power Charge before using values Empty allowed_publishers array allows every address to publish ERC20Keeper with custom contracts Suggestions for additional security checks Table handle overflow leads to abort

Threat ModelWhat are threat models?stdlib

Audit ResultsSummary

AppendixProof of concept: Reference safety verifier bypass

Bridge executor minting power

The bridge executor account is responsible for finalizing token deposits from the L1 and minting them on the L2 using the MsgFinalizeTokenDeposit message. This power allows the bridge executor to mint arbitrary coins on the L2 regardless of what has happened on the L1, so it is vital that the bridge executor account is secure and only accessible to trusted parties.