Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic siteBack

Assessment reports>Lido Gateway>Threat Model>enableWithdrawals

GeneralOverview

Findings

Informational (1)

DiscussionAbility to call `onlyThis` functions

Threat ModelWhat are threat models?L1LidoGateway.sol L2LidoGateway.sol L2WstETHToken.sol

LidoGatewayManager.sol disableDeposits disableWithdrawals enableDeposits enableWithdrawals updateDepositsDisabler updateDepositsEnabler updateWithdrawalsDisabler updateWithdrawalsEnabler

ScrollBridgeExecutor.sol

Audit ResultsSummary

Function: `enableWithdrawals()`

Function that enables the withdrawals.

Branches and code coverage (including function calls)

Intended branches

Set the isWithdrawalsEnabled to true.
Test coverage

Negative behavior

Should not allow to enable withdrawals if they are already enabled.
Test coverage
Should not allow anyone other than the withdrawalsEnabler to enable withdrawals.
Test coverage

Zellic © 2025Back to top ↑