Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic site

Assessment reports>Polygon Staking>Threat Model>deposit

GeneralOverview

Findings

Informational (7)

DiscussionThe logic in _updateStrategyRewards may not need to update all the strategies The LSTRewardsSplitter's splitting is not path-independent, which may have cross-protocol implications Calling checkUpkeep on chain is against the automation documentation and may revert or waste gas

Threat ModelWhat are threat models?

LSTRewardsSplitter.sol deposit performUpkeep splitRewards withdraw

LSTRewardsSplitterController.sol PolygonFundFlowController.sol PolygonStrategy.sol PolygonVault.sol

Audit ResultsAssessment Results

Function: `deposit(uint256 _amount)`

This function deposits an amount of LST tokens.

Inputs

_amount
- Control: Fully controlled by the controller.
- Constraints: N/A.
- Impact: Amount of tokens to deposit.

Branches and code coverage

Intended branches

Receive the amount of tokens to deposit.
Test coverage
Add the amount to the principalDeposits.
Test coverage

Zellic © 2025Back to top ↑