Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>MegaETH Predeposit>Threat Model>setMerkleRoot
GeneralOverview
Findings
Medium (1)
Low (1)
DiscussionThere is no individual capThe totalDeposited reflects all previous deposits
Threat ModelWhat are threat models?MegaUSDCDepositVault.sol
MegaUSDmDistributorVault.solclaimsetEthPerUsersetMerkleRootsetPausesetSelfClaimsetTokenwithdrawAllwithdrawETHwithdrawToken
Audit ResultsAssessment Results

Function: setMerkleRoot(byte[32] _merkleRoot)

This function is used to set the new Merkle root. It is only callable by the owner.

Inputs

  • _merkleRoot

    • Control: Arbitrary bytes32.

    • Constraints: None.

    • Impact: New Merkle root.

Branches and code coverage

Intended branches

  • Update merkleRoot.

  • Emit the MerkleRootUpdated event.

Negative behavior

  • Revert if the caller is not the owner.

Zellic © 2025Back to top ↑