Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>warpdotgreen-cli>Threat Model>initializePuzzleHashes
GeneralOverview
DiscussionAnyone can emit the SendMessage event directly without transferring tokensReentrancy in sendMessage by a minerMismatched transferTip condition between token minting and burning
Threat ModelWhat are threat models?
ERC20Bridge.sol_handleBridgingbridgeEtherToChiabridgeToChiabridgeToChiaWithPermitinitializePuzzleHashesreceiveMessage
MilliETH.solPortal.solWrappedCAT.sol
Audit ResultsAssessment Results

Function: initializePuzzleHashes(byte[32] _burnPuzzleHash, byte[32] _mintPuzzleHash)

This function initializes the puzzle hashes used. It can only be called once. This function is expected to be called during deployment.

Inputs

  • _burnPuzzleHash

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Value of the burn puzzle hash.

  • _mintPuzzleHash

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Value of the mint puzzle hash.

Branches and code coverage

Intended branches

  • Update the burn puzzle hash and mint puzzle hash.

Negative behavior

  • Revert if the burn puzzle hash or mint puzzle hash is already set.

Zellic © 2025Back to top ↑