Assessment reports
Public findings
Back to Zellic site
↗
Assessment reports
>
Perennial
>
Threat Model
>
claimReward
General
Overview
Findings
Critical (1)
High (1)
Medium (1)
Low (2)
Discussion
Unnecessary storage assignments in `MappingStorageLib` waste gas
Incorrect documentation in Vault `Mapping`
Market user interface may be misleading
Missing fee claim mechanism
Undercollateralized positions possible
Threat Model
What are threat models?
Market.sol
claimFee
claimReward
update
MarketFactory.sol
MultiInvoker.sol
Oracle.sol
OracleFactory.sol
Vault.sol
VaultFactory.sol
Audit Results
Summary
Appendix
Vault inflation POC code
Negative Liquidation PoC code
MultiInvoker drain POC code
Function:
claimReward()
Claims reward tokens that the sender is entitled to.
Zellic © 2025
Back to top ↑