Assessment reports>Nocturne>Threat Model>instantiateErc20MultiDeposit

Function: instantiateErc20MultiDeposit(address token, uint256[] values, CompressedStealthAddress depositAddr)

This instantiates a series of ERC-20 deposit requests.

Inputs

  • token

    • Control: Arbitrary.

    • Constraints: Must be whitelisted asset.

    • Impact: Token to be transferred.

  • values

    • Control: Arbitrary.

    • Constraints: Transfer of sum of values must succeed. Deposit-size maximum enforced.

    • Impact: Transfers values and issues deposit requests for values.

  • depositAddr

    • Control: Arbitrary.

    • Constraints: None. (If not a valid address, complete will fail.)

    • Impact: Copied to deposit request.

Branches and code coverage

Intended branches

  • Instantiates deposit.

Negative behavior

  • Deposit size exceeds maximum.

  • Gas compensation split is uneven.

  • Transfer of token fails.

Zellic © 2024Back to top ↑