Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Omni AVS>Threat Model>Function: registerOperator(bytes calldata pubkey, ISignatureUtils.SignatureWithSaltAndExpiry memory operatorSignature)
GeneralOverview
Findings
High (2)
Medium (1)
Informational (1)
DiscussionEigenLayer is being actively developed
Threat ModelWhat are threat models?Omni.sol
OmniAVS.solFunction: _setEthStakeInbox(address inbox)Function: _setMaxOperatorCount(uint32 count)Function: _setMinOperatorStake(uint96 stake)Function: _setOmniChainId(uint64 chainId)Function: _setOmniPortal(IOmniPortal portal)Function: _setStrategyParams(StrategyParam[] calldata params)Function: _setXCallGasLimits(uint64 base, uint64 perOperator)Function: deRegisterOperator()Function: initialize(address owner_, IOmniPortal omni_, uint64 omniChainId_, address ethStakeInbox_, uint96 minOperatorStake_, uint32 maxOperatorCount_, StrategyParam[] calldata strategyParams_)Function: registerOperator(bytes calldata pubkey, ISignatureUtils.SignatureWithSaltAndExpiry memory operatorSignature)Function: syncWithOmni()
Audit ResultsSummary

Function: registerOperator(bytes calldata pubkey, ISignatureUtils.SignatureWithSaltAndExpiry memory operatorSignature)

Allows the registration of operators within the AVS.

Inputs

  • pubkey

    • Validation: Validated that it matches the msg.sender pubkey.

    • Impact: The public key of the operator.

  • operatorSignature

    • Validation: Assumed to be validated within the _avsDirectory

    • Impact: The signature that would match the registration parameters.

Branches and code coverage (including function calls)

Intended branches

  • Should forward the opt-in call to the Slasher. Currently not implemented, as EigenLayer's implementation of Slasher has not yet been finalized.

  • Should add the operator to the AVS. Handled in _addOperator.

  • Assumes that the signature is properly verified within the AVSDirectory.

  • Should forward the registration call to the AVSDirectory. Handled in _avsDirectory.registerOperatorToAVS.

Negative behavior

  • Should not be callable when paused. Enforced through the whenNotPaused modifier.

  • Should not allow an operator that does not match the pubkey.

  • Should not allow an operator that is not in the allowlist, should the allowlist be enabled.

  • Should not allow an operator that is already an operator.

  • Should not allow an operator if the maximum operator count has been reached.

  • Should not allow an operator if the minimum stake has not been met.

Zellic © 2025Back to top ↑