Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Osmosis Authentication Abstraction>Threat Model>Authz: KeeperWrapper
GeneralOverview
Findings
Critical (2)
High (2)
Medium (2)
Low (3)
Informational (1)
DiscussionSignature authenticator excessive gas
Threat ModelWhat are threat models?authenticator
authzAuthz: KeeperWrapper
Audit ResultsSummary
AppendixAppendixPOC signature authenticator authentication bypassPOC for bypass fee payer authentication

Authz: KeeperWrapper

The original keeper for the authz module is replaced by a KeeperWrapper. The wrapper primarily acts as a proxy to the original authz keeper. However, some functionality is replaced to support tracking changes with the new Authenticator.

The wrapper only introduces changes to the Exec and DispatchActions keepers.

The following changes are introduced:

  • Exec --- The DispatchActions from the KeeperWrapper is now invoked instead of the original handler.

  • DispatchActions ---

    • The Track handler is called for each message in the transaction.

    • The DispatchActions from the original keeper is invoked to execute the transaction.

    • The ConfirmExecution handler is run for every message for posttransaction checks.

Zellic © 2025Back to top ↑