Assessment reports>TruFin Injective Staker>Threat Model>Message: ExecuteMsg::DisableValidator

Message: ExecuteMsg::DisableValidator

This allows the admin to disable a previously enabled validator. Disabled validators cannot accept new stakes, but existing stakes can still be unstaked and withdrawn as usual.

Inputs

  • info.sender

    • Validation: The disable_validator function verifies that the info.sender is the contract owner.

    • Impact: N/A.

  • validator_addr

    • Validation: Ensures the validator exists in the contract's state and is currently enabled.

    • Impact: This validator address gets disabled.

Branches and code coverage (including function calls)

Intended branches

  • If validator_addr exists and is enabled, it is marked as disabled in the contract state.

Negative behavior

  • Fail if validator_addr does not exist in the validator list.

  • Fail if validator_addr is already disabled.

Zellic © 2025Back to top ↑