Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Session Token>Threat Model>Function: claimRewards()
GeneralOverview
Findings
High (2)
Medium (1)
Low (1)
Informational (1)
DiscussionUnused and sometimes misleading functionsGas savingsMisleading functions' nameData desynchronizationRedundant checks
Threat ModelWhat are threat models?BN256G1.solBN256G2.solPairing.solRewardRatePool.solServiceNodeContribution.solServiceNodeContributionFactory.solServiceNodeRewards.solTokenConverter.sol
TokenVestingStaking.solFunction: addBLSPublicKey()Function: claimRewards()Function: initiateRemoveBLSPublicKey()Function: release()Function: retrieveRevokedFunds()Function: revoke()
Audit ResultsAssessment Results

Function: claimRewards()

The function claims staking rewards for the beneficiary, removes any unstaked service nodes from the investorServiceNodes, and transfers the claimed rewards to the beneficiary.

Branches and code coverage (including function calls)

Intended branches

Function call analysis

  • stakingRewardsContract.serviceNodes(investorServiceNodes[i - 1].serviceNodeID)

    • External/Internal? External.

    • Argument control: N/A.

    • Impact: The function retrieves service-node information from the stakingRewardsContract. After this function call, it checks the retrieved service-node information, and if it is confirmed that the service node has already been unstaked, it removes it from investorServiceNodes.

  • stakingRewardsContract.claimRewards()

    • External/Internal? External.

    • Argument control: N/A.

    • Impact: Claims rewards from the stakingRewardsContract.

  • SENT.safeTransfer(beneficiary, amount)

    • External/Internal? External.

    • Argument control: N/A.

    • Impact: Transfers the claimed rewards to the beneficiary.

Zellic © 2025Back to top ↑