Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic site

Assessment reports>warpdotgreen-cli>Threat Model>initializePuzzleHashes

GeneralOverview

DiscussionAnyone can emit the SendMessage event directly without transferring tokens Reentrancy in sendMessage by a miner Mismatched transferTip condition between token minting and burning

Threat ModelWhat are threat models?

ERC20Bridge.sol _handleBridging bridgeEtherToChia bridgeToChia bridgeToChiaWithPermit initializePuzzleHashes receiveMessage

MilliETH.sol Portal.sol WrappedCAT.sol

Audit ResultsAssessment Results

Function: `initializePuzzleHashes(byte[32] _burnPuzzleHash, byte[32] _mintPuzzleHash)`

This function initializes the puzzle hashes used. It can only be called once. This function is expected to be called during deployment.

Inputs

_burnPuzzleHash
- Control: Arbitrary.
- Constraints: None.
- Impact: Value of the burn puzzle hash.
_mintPuzzleHash
- Control: Arbitrary.
- Constraints: None.
- Impact: Value of the mint puzzle hash.

Branches and code coverage

Intended branches

Update the burn puzzle hash and mint puzzle hash.
Test coverage

Negative behavior

Revert if the burn puzzle hash or mint puzzle hash is already set.
Negative test

Zellic © 2024Back to top ↑