Assessment reports>Prosper Omnichain Fungible Token>Threat Model>Function: withdrawSwappables(address receiver)

Function: withdrawSwappables(address receiver)

The function allows the owner of the contract to withdraw the total balance of former PROS tokens that were previously swapped by the users with the swapToken function. The function reverts if SWAPPABLE_TOKEN is set to the zero address. Note that those tokens can then by swapped again to obtain new PROS tokens.

Inputs

  • receiver

    • Control: Implicit validation that the receiver is not the zero address by the safeTransfer function.

    • Impact: Withdraws the former PROS tokens to any receiver address.

Branches and code coverage (including function calls)

Intended branches

  • Tokens are successfully withdrawn to the receiver by the owner.

Negative behavior

  • The function reverts when the function is called by an address other than the owner.

  • The function reverts when the SWAPPABLE_TOKEN is set to zero.

  • The function reverts when the receiver address is set to zero.

Function call analysis

  • withdrawSwappables -> safeTransfer

    • External/Internal? External.

    • Argument control? receiver.

    • Impact: The tokens are transferred to the receiver address.

Zellic © 2025Back to top ↑