Zellic - Audit Reports

Assessment reports>Osmosis Authentication Abstraction>Threat Model>Message: MsgRemoveAuthenticator

GeneralOverview

Findings

Critical (2)

DiscussionSignature authenticator excessive gas

Threat ModelWhat are threat models?

authenticator Message: MsgAddAuthenticator Message: MsgRemoveAuthenticator

authz

Audit ResultsSummary

AppendixAppendix POC signature authenticator authentication bypass POC for bypass fee payer authentication

Message: `MsgRemoveAuthenticator`

The MsgRemoveAuthenticator handler is responsible for removing an authenticator from an account.

The parameter controllable by a user is Id --- the ID of the authenticator to be removed.

The OnAuthenticatorRemoved of the authenticator will be called prior to it being removed. If an error is returned from this call, it will prevent the authenticator from being removed.