Assessment reports>Mantle>Threat Models>sweepTokens

Function: sweepTokens(address _tokenAddress, address _recipient, uint256 _amount)

Sweeps an amount of tokens to a _recipient address.

Inputs

  • _tokenAddress

    • Control: Full.

    • Constraints: Needs to be either BIT_TOKEN_ADDRESS or MNT_TOKEN_ADDRESS.

    • Impact: Address of tokens to be sweeped.

  • _recipient

    • Control: Full.

    • Constraints: Discarded.

    • Impact: Discarded.

  • _amount

    • Control: Full.

    • Constraints: Discarded.

    • Impact: Amount of tokens to be sweeped.

Branches and code coverage (including function calls)

Intended branches

  • Successfully sweeps tokens if called by the owner.

Negative behavior

  • Reverts if not called by the owner.

Function call analysis

  • sweepTokens -> ERC20(_tokenAddress).safeTransfer(_recipient, _amount)

    • What is controllable? _tokenAddress, _recipient, and _amount.

    • If return value controllable, how is it used and how can it go wrong? Discarded.

    • What happens if it reverts, reenters, or does other unusual control flow? Discarded.

Zellic © 2024Back to top ↑