Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Perennial>Threat Model>updateOperator
GeneralOverview
Findings
Critical (1)
High (1)
Medium (1)
Low (2)
DiscussionUnnecessary storage assignments in `MappingStorageLib` waste gasIncorrect documentation in Vault `Mapping`Market user interface may be misleadingMissing fee claim mechanismUndercollateralized positions possible
Threat ModelWhat are threat models?Market.solMarketFactory.solMultiInvoker.solOracle.solOracleFactory.solVault.sol
VaultFactory.solupdateOperator
Audit ResultsSummary
AppendixVault inflation POC codeNegative Liquidation PoC codeMultiInvoker drain POC code

Function: updateOperator(address address, bool bool)

Allows or disallows an operator to operate on behalf of the sender. It emits the OperatorUpdated event.

Inputs

  • operator

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Operator address.

  • newEnabled

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Whether to allow operator to operate on sender.

Zellic © 2025Back to top ↑