Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Perennial>Threat Model>fund
GeneralOverview
Findings
Critical (1)
High (1)
Medium (1)
Low (1)
Informational (1)
DiscussionUnnecessary storage assignments in `MappingStorageLib` waste gasIncorrect documentation in Vault `Mapping`Market user interface may be misleadingMissing fee claim mechanismUndercollateralized positions possible
Threat ModelWhat are threat models?Market.solMarketFactory.solMultiInvoker.solOracle.sol
OracleFactory.solclaimfund
Vault.solVaultFactory.sol
Audit ResultsSummary
AppendixVault inflation POC codeNegative Liquidation PoC codeMultiInvoker drain POC code

Function: fund(IMarket IMarket)

Claims the oracle's fee from the given market.

Note that market can be an attacker-deployed Market --- the only requirement is that market.oracle() returns an oracle that is an instance of this factory. However, the only impact is that market.claimFee() is called.

Inputs

  • market

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: The market.oracle() is called, and if the return value is a valid instance, market.claimFee() is called.

Zellic © 2025Back to top ↑