Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic siteBack

Assessment reports>MegaETH Predeposit>Threat Model>setSaleUUID

GeneralOverview

Findings

DiscussionThere is no individual cap The totalDeposited reflects all previous deposits

Threat ModelWhat are threat models?

MegaUSDCDepositVault.sol deposit setCap setEndTime setPause setPermitSigner setSaleUUID setStartTime setTreasury withdrawToTreasury

MegaUSDmDistributorVault.sol

Audit ResultsAssessment Results

Function: `setSaleUUID(byte[16] newSaleUUID)`

This function is used to set the new sale UUID. It is only callable by the owner.

Inputs

newSaleUUID
- Control: Arbitrary bytes16.
- Constraints: Must not be zero.
- Impact: New sale UUID.

Branches and code coverage

Intended branches

Emit the SaleUUIDUpdated event.
Test coverage
Update saleUUID.
Test coverage

Negative behavior

Revert if the caller is not the owner.
Negative test
Revert if the new sale UUID is zero.
Negative test

Zellic © 2025Back to top ↑