Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>TruFin Injective Staker>Threat Model>Message: ExecuteMsg::SetFee
GeneralOverview
Findings
Medium (1)
Informational (1)
Threat ModelWhat are threat models?
Injective-staker-contractMessage: ExecuteMsg::AddAgentMessage: ExecuteMsg::AddUserToBlacklistMessage: ExecuteMsg::AddUserToWhitelistMessage: ExecuteMsg::AddValidatorMessage: ExecuteMsg::AllocateMessage: ExecuteMsg::ClaimOwnershipMessage: ExecuteMsg::ClaimMessage: ExecuteMsg::AddUserToWhitelistMessage: ExecuteMsg::CompoundRewardsMessage: ExecuteMsg::DeallocateMessage: ExecuteMsg::DisableValidatorMessage: ExecuteMsg::DistributeAllMessage: ExecuteMsg::SetDistributionFeeMessage: ExecuteMsg::DistributeRewardsMessage: ExecuteMsg::EnableValidatorMessage: ExecuteMsg::PauseMessage: ExecuteMsg::SetPendingOwnerMessage: ExecuteMsg::RemoveAgentMessage: ExecuteMsg::SetDefaultValidatorMessage: ExecuteMsg::SetFeeMessage: ExecuteMsg::SetMinimumDepositMessage: ExecuteMsg::SetTreasuryMessage: ExecuteMsg::StakeToSpecificValidatorMessage: ExecuteMsg::StakeMessage: ExecuteMsg::UnpauseMessage: ExecuteMsg::UnstakeFromSpecificValidatorMessage: ExecuteMsg::Unstake
Audit ResultsAssessment Results

Message: ExecuteMsg::SetFee

This allows the admin to set the treasury fee charged on rewards.

Inputs

  • info.sender

    • Validation: The set_fee function verifies that the info.sender is the owner.

    • Impact: N/A.

  • new_fee

    • Validation: The fee is verified to be lower than 100%.

    • Impact: The fee is set to new_fee.

Branches and code coverage (including function calls)

Intended branches

  • If the fee is lower than 100%, it is updated in the state.

Negative behavior

  • Fail if the fee is larger than 100%.

Zellic © 2025Back to top ↑