Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Omni AVS>Threat Model>Function: syncWithOmni()
GeneralOverview
Findings
High (2)
Medium (1)
Informational (1)
DiscussionEigenLayer is being actively developed
Threat ModelWhat are threat models?Omni.sol
OmniAVS.solFunction: _setEthStakeInbox(address inbox)Function: _setMaxOperatorCount(uint32 count)Function: _setMinOperatorStake(uint96 stake)Function: _setOmniChainId(uint64 chainId)Function: _setOmniPortal(IOmniPortal portal)Function: _setStrategyParams(StrategyParam[] calldata params)Function: _setXCallGasLimits(uint64 base, uint64 perOperator)Function: deRegisterOperator()Function: initialize(address owner_, IOmniPortal omni_, uint64 omniChainId_, address ethStakeInbox_, uint96 minOperatorStake_, uint32 maxOperatorCount_, StrategyParam[] calldata strategyParams_)Function: registerOperator(bytes calldata pubkey, ISignatureUtils.SignatureWithSaltAndExpiry memory operatorSignature)Function: syncWithOmni()
Audit ResultsSummary

Function: syncWithOmni()

Allows syncing of operators' stake and delegations with the Omni chain.

Branches and code coverage (including function calls)

Intended branches

  • Retrieves the current list of operators.

  • Forwards the call to OmniPortal via xcall to sync the operators' stake and delegations with the Omni chain.

  • Assumes that msg.value is enough to cover the fee required for the sync.

Negative behavior

  • Should not allow forwarding of the call if any of the operators are below the threshold. Currently not enforced.

  • Should not be callable if the contract is paused. Enforced through the whenNotPaused modifier.

Zellic © 2025Back to top ↑