Assessment reports>TruFin Injective Staker>Threat Model>Message: ExecuteMsg::AddUserToBlacklist

Message: ExecuteMsg::AddUserToBlacklist

This allows an agent to add a user to the blacklist.

Inputs

  • info.sender

    • Validation: The add_user_to_blacklist function checks if the info.sender is an authorized agent.

    • Impact: N/A.

  • user

    • Validation: The user address is validated to ensure it is a valid address format.

    • Impact: If the user is not already blacklisted, they are added to the blacklist.

Branches and code coverage (including function calls)

Intended branches

  • If the user address is valid and not already blacklisted, it is added to the blacklist.

Negative behavior

  • Fail if the info.sender is not an authorized agent.

  • Fail if the user address is invalid.

  • Fail if the user is already blacklisted.

Zellic © 2025Back to top ↑