Assessment reportsPublic findings
Back to Zellic site
↗
Assessment reports>warpdotgreen-cli>Threat Model>withdraw
GeneralOverview
DiscussionAnyone can emit the SendMessage event directly without transferring tokensReentrancy in sendMessage by a minerMismatched transferTip condition between token minting and burning
Threat ModelWhat are threat models?ERC20Bridge.sol
MilliETH.soldepositwithdraw
Portal.solWrappedCAT.sol
Audit ResultsAssessment Results

Function: withdraw(uint256 amount)

This function is used to withdraw milliETH; equivalent Ether value is sent back. This burns the specified amount of milliETH and sends the equivalent amount of ETH back to the sender.

Inputs

  • amount

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Value of the amount to withdraw.

Branches and code coverage

Intended branches

  • Burn the given amount of milliETH.

  • Send the equivalent amount of ETH to the sender.

Negative behavior

  • Revert if the amount is lower than zero.

  • Revert if withdrawal has failed.

Zellic © 2024Back to top ↑