Assessment reports>Origami Finance>Threat Model>allocate

Function: allocate(uint256 amount)

Allocates to Aave (internal).

Inputs

  • amount

    • Control: Full.

    • Constraints: None.

    • Impact: Amount to supply Aave lending pool.

Branches and code coverage

Intended branches

  • Allocate was successful

Negative behavior

  • Allocate zero amount

Function call analysis

  • SafeERC20.safeTransferFrom(this.asset, msg.sender, address(this), amount)

    • What is controllable? amount.

    • If the return value is controllable, how is it used and how can it go wrong? Discarded.

    • What happens if it reverts, reenters or does other unusual control flow? N/A.

  • this.lendingPool.supply(address(this.asset), amount, address(this), 0)

    • What is controllable? amount.

    • If the return value is controllable, how is it used and how can it go wrong? Discarded.

    • What happens if it reverts, reenters or does other unusual control flow? N/A.

Zellic © 2025Back to top ↑