Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic siteBack

Assessment reports>Lido Gateway>Threat Model>disableWithdrawals

GeneralOverview

Findings

Informational (1)

DiscussionAbility to call `onlyThis` functions

Threat ModelWhat are threat models?L1LidoGateway.sol L2LidoGateway.sol L2WstETHToken.sol

LidoGatewayManager.sol disableDeposits disableWithdrawals enableDeposits enableWithdrawals updateDepositsDisabler updateDepositsEnabler updateWithdrawalsDisabler updateWithdrawalsEnabler

ScrollBridgeExecutor.sol

Audit ResultsSummary

Function: `disableWithdrawals()`

Function that disables the withdrawals.

Branches and code coverage (including function calls)

Intended branches

Set the isWithdrawalsEnabled to false.
Test coverage

Negative behavior

Should not allow to disable withdrawals if they are already disabled. Performed in whenWithdrawalsEnabled modifier.
Test coverage
Should not allow anyone other than the withdrawalsDisabler to disable withdrawals.
Test coverage

Zellic © 2025Back to top ↑