Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Orderly Network>Threat Model>depositTo
GeneralOverview
Findings
Critical (1)
High (4)
Medium (3)
Informational (1)
DiscussionAdditional checksOverall issues with some functionsThe `changeFeeCollector` does not revertThe `tokenHash` is not a hash from `tokenAddress`
Threat ModelWhat are threat models?AccountTypeHelper.solAccountTypePositionHelper.solCrossChainRelayUpgradeable.solFeeManager.solLedger.solLedgerComponent.solLedgerCrossChainManagerUpgradeable.solMarketManager.solOperatorManager.solOperatorManagerComponent.solSignature.sol
Vault.solchangeTokenAddressAndAllowdepositdepositToemergencyPauseemergencyUnpausesetAllowedBrokersetAllowedTokensetCrossChainManagerwithdraw
VaultCrossChainManagerUpgradeable.solVaultManager.sol
Audit ResultsSummary

Function: depositTo(address receiver, VaultTypes.VaultDepositFE data)

This is the same as deposit, but this function allows to set the receiver's address different from the sender's address.

Zellic © 2024Back to top ↑