Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic siteBack

Assessment reports>Multisafe USPC Contracts>Threat Model>_update

GeneralOverview

Findings

Threat ModelWhat are threat models?IUSPCHub.sol

USPC.sol _deposit _update _withdraw

Audit ResultsAssessment Results

Function: `_update(address from, address to, uint256 value)`

This function is used to block transfers from/to denylisted addresses.

Inputs

from
- Control: Full control.
- Constraints: It cannot be address 0, and it cannot be denylisted addresses.
- Impact: The address sending tokens.
to
- Control: Full control.
- Constraints: It cannot be address 0, and it cannot be denylisted addresses.
- Impact: The address receiving tokens.
value
- Control: Full control.
- Constraints: None.
- Impact: The amount of tokens being transferred.

Branches and code coverage

Intended branches

Addresses not listed in the denylisted addresses can correctly complete the changes to balances and total amounts.

Negative behavior

Revert if sender or receiver is on the transfer deny list

Revert if contract is paused.

Zellic © 2025Back to top ↑