Assessment reports>Origami Finance>Threat Model>recoverToken

Function: recoverToken(address token, address to, uint256 amount)

Allows the caller who has access to the function to transfer any tokens from the contract balance without restrictions.

Inputs

  • token

    • Constraints: No constraints.

    • Impact: The address of the token that will be transferred — can be this contract address.

  • to

    • Constraints: Not zero address.

    • Impact: The receiver of tokens.

  • amount

    • Constraints: The contract should have enough amount of tokens.

    • Impact: The number of tokens will be transferred from the contract.

Branches and code coverage

Negative behavior

  • Non-whitelisted caller

Zellic © 2025Back to top ↑