Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Polygon Staking>Threat Model>deposit
GeneralOverview
Findings
High (1)
Medium (1)
Low (4)
Informational (7)
DiscussionThe logic in _updateStrategyRewards may not need to update all the strategiesThe LSTRewardsSplitter's splitting is not path-independent, which may have cross-protocol implicationsCalling checkUpkeep on chain is against the automation documentation and may revert or waste gas
Threat ModelWhat are threat models?LSTRewardsSplitter.solLSTRewardsSplitterController.solPolygonFundFlowController.sol
PolygonStrategy.soldeposit
PolygonVault.sol
Audit ResultsAssessment Results

Function: deposit(uint256 _amount, bytes)

This function deposits tokens from the caller into this strategy. It can only be called by the staking pool.

Inputs

  • _amount

    • Control: Fully controlled by the caller.

    • Constraints: N/A.

    • Impact: Amount of tokens to deposit.

Branches and code coverage

Intended branches

  • Receive the amount of tokens to deposit.

  • Add the amount to the total deposits and total queued.

Zellic © 2025Back to top ↑