Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Ostium>Threat Model>tryNewOpenPnlRequestOrEpoch
GeneralOverview
Findings
Critical (2)
High (3)
Medium (6)
Low (6)
Informational (2)
DiscussionRemoval of trading pairs is not supportedIncorrect last updated block number for TP and SLTradeUtils used as a library for address
Threat ModelWhat are threat models?Delegatable.solOstiumOpenPnl.solOstiumTrading.sol
OstiumVault.sol_executeDiscountAndLockcancelWithdrawRequestdepositdepositWithDiscountAndLockdistributeRewardmakeWithdrawRequestmintmintWithDiscountAndLockreceiveAssetsredeemtransfertransferFromtryNewOpenPnlRequestOrEpochtryResetDailyAccPnlDeltatryUpdateCurrentMaxSupplyunlockDepositwithdraw
Audit ResultsSummary

Function: tryNewOpenPnlRequestOrEpoch()

Try to call newOpenPnlRequestOrEpoch on OstiumOpenPnl.

Since that function does not behave differently if the caller is OstiumVault, this function adds no attack surface to the threat model. See newOpenPnlRequestOrEpoch (ref↗) for analysis.

Zellic © 2025Back to top ↑