Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Spectral Modelers>Threat Model>provideDrandProof
GeneralOverview
Findings
Critical (1)
High (2)
Medium (3)
Low (1)
Informational (1)
DiscussionReturn of staked tokensInsufficient testingMissing zero-address check in `setAdmin`
Threat ModelWhat are threat models?BeaconProxyDeployer.solCompetition.solCompetitionFactory.sol
Modeler.solZKMLChallengeModeleraddStakeToModeleraddStakeToValidatoremergencyOptOutValidatorgiveChallengeToModelerkickModeleroptInModeleroptInValidatoroptOutModeleroptOutValidatorpostGradedprovideDrandProofregisterModelerregisterValidatorreplaceOptOutTopNModelerrespondToChallengerespondToZKMLChallengesetModelerNetPerformanceResultAndUpdatesetNextRandSlotupdateModel
ServiceAgreement.sol
Audit ResultsSummary

Function: provideDrandProof(DataTypes.DrandProof proof)

This allows providing the proof for the specific round.

Inputs

  • proof

    • Control: Fully controlled by calling function.

    • Constraints: Checked that the round is not already submitted.

    • Impact: The proof for the specific round.

Branches and code coverage

Intended branches

  • Assure that the previous_signature matches the previous round signature. Currently not performed.

  • Assure that the signature is legitimate and recovers into the submitter. Currently not performed.

  • Should set the drands mapping for the proof.round to the proof.

Zellic © 2025Back to top ↑