Assessment reports>Smart Vault>Threat Model>claim

Function: claim(ClaimParams claimParams)

This function is used to claim rewards from a smart vault.

Inputs

  • claimParams

    • Control: Fully controllable by the caller.

    • Constraints: Address of the vault must be whitelisted by owner.

    • Impact: Addresses of the vault and receiver.

Branches and code coverage

Intended branches

  • Check the vault address is valid by calling _checkVaultIsValid.

  • Call claim on the vault.

  • Emit the Claim event.

Negative behavior

  • Revert if the contract is paused.

  • Revert if the provided vault address is not valid.

Function call analysis

  • vault.claim(msg.sender, receiver)

    • What is controllable? vault but whitelisted by owner and receiver.

    • If the return value is controllable, how is it used and how can it go wrong? The return value is not used.

    • What happens if it reverts, reenters or does other unusual control flow? The revert indicates a failure in the vault claim, and reentrancy is not an issue since there are no subsequent values affected by the CEI pattern.

Zellic © 2025Back to top ↑