Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Orderly Network>Threat Model>setPerpMarketCfg
GeneralOverview
Findings
Critical (1)
High (3)
Medium (4)
Informational (1)
DiscussionAdditional checksOverall issues with some functionsThe `changeFeeCollector` does not revertThe `tokenHash` is not a hash from `tokenAddress`
Threat ModelWhat are threat models?AccountTypeHelper.solAccountTypePositionHelper.solCrossChainRelayUpgradeable.solFeeManager.solLedger.solLedgerComponent.solLedgerCrossChainManagerUpgradeable.sol
MarketManager.solsetLastFundingUpdatedsetLastMarkPriceUpdatedsetPerpMarketCfgupdateMarketUploadupdateMarketUpload
OperatorManager.solOperatorManagerComponent.solSignature.solVault.solVaultCrossChainManagerUpgradeable.solVaultManager.sol
Audit ResultsSummary

Function: setPerpMarketCfg(byte[32] _symbolHash, MarketTypes.PerpMarketCfg _perpMarketCfg)

This allows the owner of the contract to update the full perpMarketCfg configuration.

Inputs

  • data

    • Control: Full control by Owner.

    • Constraints: No checks.

    • Impact: The set perpMarketCfg configuration is not used in any way — without impact.

Branches and code coverage

Negative behavior

  • Caller is not Owner.

Zellic © 2025Back to top ↑