Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>warpdotgreen-cli>Threat Model>initialize
GeneralOverview
DiscussionAnyone can emit the SendMessage event directly without transferring tokensReentrancy in sendMessage by a minerMismatched transferTip condition between token minting and burning
Threat ModelWhat are threat models?ERC20Bridge.solMilliETH.sol
Portal.solinitializereceiveMessagerescueAssetrescueEthersendMessageupdateMessageTollupdateSignatureThresholdupdateSignerupdateSupportedChain
WrappedCAT.sol
Audit ResultsAssessment Results

Function: initialize(address _coldMultisig, uint256 _messageToll, address[] _signers, uint256 _signatureThreshold, byte[3][] _supportedChains)

This function is used to initialize the contract with the required parameters. It sets the initial owners, message toll, signers, and signature threshold. This function can only be called once and called in the same transaction as deployment.

Inputs

  • _coldMultisig

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Address of owner.

  • _messageToll

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Value of message toll price.

  • _signers

    • Control: Arbitrary.

    • Constraints: Nonzero address.

    • Impact: Array of addresses authorized to attest messages were sent to this chain.

  • _signatureThreshold

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Number of required signatures to validate a message.

  • _supportedChains

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Array of supported chains.

Branches and code coverage

Intended branches

  • Set the contract's settings.

Negative behavior

  • Revert if this function is called more than once.

  • Revert if provided signer address is zero.

Zellic © 2025Back to top ↑