Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic siteBack

Assessment reports>SAX>Threat Model>Function: batchClaimTokens(BatchClaimTokensInput[] calldata input)

GeneralOverview

Findings

Informational (1)

DiscussionUnused and redundant fields of structures Checks-effects-interactions pattern Redundant if conditions in `getSellPrice` function Centralization risk Initial mint sellable Token creator can set virality Incomplete test coverage Token share rounding errors

Threat ModelWhat are threat models?BondingViralityController.sol

MerkleTokenShare.sol Function: batchClaimTokens(BatchClaimTokensInput[] calldata input)Function: function claimTokens(bytes32[] proof, uint256 epoch, uint256 index, uint256 tokenIdx, uint16 shareBbps)

Audit ResultsSummary

Function: `batchClaimTokens(BatchClaimTokensInput[] calldata input)`

Calls the claimTokens for data from the input array in turn. For more information, see the description of the claimTokens function.

Zellic © 2025Back to top ↑