Assessment reports>Origami Finance>Threat Model>setLendingClerk

Function: setLendingClerk(address _lendingClerk)

Allows caller with access to this function to change the lendingClerk contract address. The lendingClerk contract is triggered during investment and exit-token processes for deposit/withdraw tokens. The asset tokens' approve for the old lendingClerk contract will be reset to zero, and the new lendingClerk will get full access to asset tokens, which are owned by this contract.

Inputs

  • _lendingClerk

    • Constraints: Cannot be zero address.

    • Impact: This contract is responsible for managing borrowing, repayments, and debt of borrowers.

Branches and code coverage

Intended branches

  • The lendingClerk was updated properly

Negative behavior

  • Non-whitelisted caller

  • The _lendingClerk is zero address

Zellic © 2025Back to top ↑