Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Nukem Loans>Threat Model>getCurrentlyUtilized
GeneralOverview
Findings
Critical (3)
High (3)
Medium (2)
Low (1)
DiscussionInitializer called in constructorBorrowing on behalf of the Market contractPotential storage-collision issueSaferERC20 additional checksEIP-712 implementationMarket setters should only be called onceUtilizing eth-brownie for testingCentralizationAMM oracle pricing
Threat ModelWhat are threat models?AbstractSwapper.solAuctions.solCollateral.solCredit.solDebt.solEIP712.solERC20Base.solERC20Permit.solEnFi4626.sol
LendingStrategy.solgetCurrentlyUtilizedpeek
Market.solProxyManager.solRoles.solSaferERC20.solUniswapV2Swapper.sol
Audit ResultsSummary

Function: getCurrentlyUtilized()

This gets the amount of funds utilized as a percentage (precision).

Branches and code coverage (including function calls)

Intended branches

  • Scales linearly with the utilization rate.

Negative behavior

  • Boundary tests.

Zellic © 2025Back to top ↑