Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic siteBack

Assessment reports>Polygon Staking>Threat Model>restakeRewards

GeneralOverview

Findings

Informational (7)

DiscussionThe logic in _updateStrategyRewards may not need to update all the strategies The LSTRewardsSplitter's splitting is not path-independent, which may have cross-protocol implications Calling checkUpkeep on chain is against the automation documentation and may revert or waste gas

Threat ModelWhat are threat models?LSTRewardsSplitter.sol LSTRewardsSplitterController.sol

PolygonFundFlowController.sol restakeRewards unbondVaults withdrawVaults

PolygonStrategy.sol PolygonVault.sol

Audit ResultsAssessment Results

Function: `restakeRewards(uint256[] _vaultIds)`

This function restakes rewards for vaults. It is a wrapper of restakeRewards in strategy.

Inputs

_vaultIds
- Control: Fully controlled by the caller.
- Constraints: N/A.
- Impact: Array of vaults to restake rewards for.

Branches and code coverage

Intended branches

Call restakeRewards in strategy.
Test coverage

Zellic © 2025Back to top ↑