Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Omni AVS>Threat Model>Function: initialize(address owner_, IOmniPortal omni_, uint64 omniChainId_, address ethStakeInbox_, uint96 minOperatorStake_, uint32 maxOperatorCount_, StrategyParam[] calldata strategyParams_)
GeneralOverview
Findings
High (2)
Medium (1)
Informational (1)
DiscussionEigenLayer is being actively developed
Threat ModelWhat are threat models?Omni.sol
OmniAVS.solFunction: _setEthStakeInbox(address inbox)Function: _setMaxOperatorCount(uint32 count)Function: _setMinOperatorStake(uint96 stake)Function: _setOmniChainId(uint64 chainId)Function: _setOmniPortal(IOmniPortal portal)Function: _setStrategyParams(StrategyParam[] calldata params)Function: _setXCallGasLimits(uint64 base, uint64 perOperator)Function: deRegisterOperator()Function: initialize(address owner_, IOmniPortal omni_, uint64 omniChainId_, address ethStakeInbox_, uint96 minOperatorStake_, uint32 maxOperatorCount_, StrategyParam[] calldata strategyParams_)Function: registerOperator(bytes calldata pubkey, ISignatureUtils.SignatureWithSaltAndExpiry memory operatorSignature)Function: syncWithOmni()
Audit ResultsSummary

Function: initialize(address owner_, IOmniPortal omni_, uint64 omniChainId_, address ethStakeInbox_, uint96 minOperatorStake_, uint32 maxOperatorCount_, StrategyParam[] calldata strategyParams_)

Initializes the OmniAVS contract.

Inputs

  • owner_

    • Validation: None.

    • Impact: The address of the contract owner.

  • omni_

    • Validation: None.

    • Impact: The Omni portal contract.

  • omniChainId_

    • Validation: None.

    • Impact: The Omni chain ID.

  • ethStakeInbox_

    • Validation: None.

    • Impact: The EthStakeInbox contract address.

  • minOperatorStake_

    • Validation: None.

    • Impact: The minimum operator stake.

  • maxOperatorCount_

    • Validation: None.

    • Impact: The maximum operator count.

  • strategyParams_

    • Validation: None.

    • Impact: List of accepted strategies and their multipliers.

Branches and code coverage (including function calls)

Intended branches

  • Set the OmniPortal contract.

  • Set the OmniChainId.

  • Set the XCallGasLimits.

  • Set the EthStakeInbox.

  • Set the MinOperatorStake.

  • Set the MaxOperatorCount.

  • Set the StrategyParams.

  • Enable the allowlist.

  • Transfer ownership to the owner_.

Negative behavior

  • Should not be callable multiple times. Enforced through the initializer modifier.

Zellic © 2025Back to top ↑