Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>Session Token>Threat Model>Function: retrieveRevokedFunds()
GeneralOverview
Findings
Critical (1)
High (1)
Medium (1)
Low (1)
Informational (1)
DiscussionUnused and sometimes misleading functionsGas savingsMisleading functions' nameData desynchronizationRedundant checks
Threat ModelWhat are threat models?BN256G1.solBN256G2.solPairing.solRewardRatePool.solServiceNodeContribution.solServiceNodeContributionFactory.solServiceNodeRewards.solTokenConverter.sol
TokenVestingStaking.solFunction: addBLSPublicKey()Function: claimRewards()Function: initiateRemoveBLSPublicKey()Function: release()Function: retrieveRevokedFunds()Function: revoke()
Audit ResultsAssessment Results

Function: retrieveRevokedFunds()

The function allows the revoker to retrieve tokens that have been unstaked after the vesting has been revoked, ensuring that funds are not locked in the contract.

Branches and code coverage (including function calls)

Intended branches

Negative behavior

Function call analysis

  • token.balanceOf(address(this))

    • External/Internal? External.

    • Argument control: N/A.

    • Impact: Retrieves the balance of tokens held by the contract.

  • token.safeTransfer(revoker, balance)

    • External/Internal? External.

    • Argument control: balance.

    • Impact: Transfers the balance of tokens to the revoker.

Zellic © 2024Back to top ↑