Zellic - Audit Reports

Used to execute new governance instructions.

vaa
- Validation: Checked to be a valid Wormhole message. Checked to be from an authorized governance source and chain. Checked to ensure that the governance action is valid. Checked to ensure the data source has supplied the necessary fee.
- Impact: The price feed specified in the VAA is updated, with the new price set to the value in the VAA.

Intended branches

Valid UpgradeContract actions are handled successfully.

Valid AuthorizeGovernanceDataSourceTransfer actions are handled successfully.

Valid SetDataSources actions are handled successfully.

Valid SetFee actions are handled successfully.

Valid SetValidPeriod actions are handled successfully.

Negative behaviour

VAA is rejected if the sequence is lower than the currently stored sequence.

VAA is rejected if the emitter is not authorized.

VAA is rejected if the emitter chain is not valid.

VAA is rejected if it cannot be validated by wormhole (i.e., not enough wormhole guardian signatures).

VAA is rejected if the target chain ID is invalid or not 0.

VAA is rejected if deserialization fails for any reason.

VAA is rejected if an invalid fee is provided for the SetFee action.

VAA is rejected if a RequestGovernanceDataSourceTransfer action is specified as a direct governance instruction.

VAA is rejected if the wrong module is specified for an action.

VAA is rejected if a bad source index is specified for the RequestGovernanceDataSourceTransfer VAA.