Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>Stable Predeposit>Threat Model>recoverEth
GeneralOverview
Findings
Medium (1)
DiscussionCode-quality improvementsLack of bridging gas refunds
Threat ModelWhat are threat models?HourglassStableVault.sol
HourglassStableVaultBridge.solFunction: bridgeToStable(uint256 shares, address recipient, bytes lzOpts, uint16 slippageBps)Function: bridgeToStableWithPermit(uint256 shares, address recipient, bytes lzOpts, uint16 slippageBps, uint256 deadline, uint8 v, byte[32] r, byte[32] s)recoverErc20recoverEth
HourglassStableVaultFrax.solHourglassStableVaultKYC.sol
Audit ResultsAssessment Results

Function: recoverEth()

This function allows the owner to recover any ETH stuck in the contract, at any time.

Branches and code coverage

Intended branches

  • Successfully able to call the function with intended behavior.

Negative behavior

  • Caller must be the owner.

  • The ETH transfer must succeed.

Function call analysis

  • None.

Zellic © 2025Back to top ↑