Function: withdraw(uint256 amount, address owner, address receiver)

This function is used to withdraw underlying assets from the smart vault. It is expected to be called from the smart vault manager.

Inputs

• amount

  • Control: Fully controllable by the caller (smartVaultManager).

  • Constraints: Amount should be less than the shares of the owner.

  • Impact: Amount to withdraw.

• owner

  • Control: Fully controllable by the caller (smartVaultManager).

  • Constraints: None.

  • Impact: Address of the share owner.

• receiver

  • Control: Fully controllable by the caller (smartVaultManager).

  • Constraints: None.

  • Impact: Address of the receiver.

Branches and code coverage

Intended branches

• Invoke the _beforeWithdraw function.

  Test coverage

• Check if the current timestamp is within the withdraw time range.

  Test coverage

• Check if the amount is within the shares of the owner.

  Test coverage

• Invoke the _withdraw function.

  Test coverage

• Update the shares for the receiver.

  Test coverage

• Call the safeTransfer function of the token to the receiver.

  Test coverage

• Update the total deposited underlying asset amount.

  Test coverage

• Emit the Withdraw event.

  Test coverage

• Invoke the _manageDebtAndStake function.

  Test coverage

• Skip when staking is disabled.

  Test coverage

• Calculate the underlying token value using the manager's fetchPrice function.

  Test coverage

• Calculate the target staking amount using the staking factor.

  Test coverage

  • If the target is greater than the minted, mint the debt token and adjust the staking amount.

    Test coverage

  • If the target is less than the minted, burn the debt token and adjust the staking amount.

    Test coverage

Negative behavior

• Revert if the caller is not the manager.

  Negative test

• Revert if the contract is paused.

  Negative test

• Revert if the amount is zero.

  Negative test

• Revert if the amount is greater than the shares of the owner.

  Negative test

• Revert if minting/burning debt token fails.

  Negative test

Function call analysis

• this._withdraw(amount, owner, receiver) -> SafeERC20.safeTransfer(this.underlyingAsset, receiver, amount)

  • What is controllable? receiver and amount.

  • If the return value is controllable, how is it used and how can it go wrong? The return value is not used.

  • What happens if it reverts, reenters or does other unusual control flow? A revert indicates the transfer failed or the contract does not have enough underlying asset.

• Other external call flows are the same as the depositERC20 function's _manageDebtAndStake flow of SmartVault