Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>RabbitX>Discussion>Centralization risk
GeneralOverview
Findings
Low (2)
Informational (1)
DiscussionOwner of the contract cannot be changedCentralization risk
Threat ModelWhat are threat models?Bfx.solBfxDeposit.solBfxVault.solPoolDeposit.solRabbit.sol
Audit ResultsSummary

Centralization risk

The contracts under the scope of this audit are the on-chain part of the project. The off-chain infrastructure is responsible to process the events emitted on the on-chain contracts and create a signature for withdrawals.

This implies the privilege that the off-chain infrastructure retains for the on-chain contracts. Notably, the off-chain infrastructure has a permission to withdraw all assets from Bfx and Rabbit contracts.

We believe that the off-chain infrastructure must be carefully developed and operated in order to implement the secure system. Also, we recommend to reduce the centralization risk where possible.

Zellic © 2025Back to top ↑