Assessment reportsPublic findings
Back to Zellic siteBack
↗
Assessment reports>warpdotgreen-cli>Threat Model>rescueAsset
GeneralOverview
DiscussionAnyone can emit the SendMessage event directly without transferring tokensReentrancy in sendMessage by a minerMismatched transferTip condition between token minting and burning
Threat ModelWhat are threat models?ERC20Bridge.solMilliETH.sol
Portal.solinitializereceiveMessagerescueAssetrescueEthersendMessageupdateMessageTollupdateSignatureThresholdupdateSignerupdateSupportedChain
WrappedCAT.sol
Audit ResultsAssessment Results

Function: rescueAsset(address _assetContract, address[] _receivers, uint256[] _amounts)

This function is used to send stuck ERC-20 tokens, or ERC-20 tokens mistakenly sent to the contract, to a list of addresses. This function is only callable by the contract owner.

Inputs

  • _assetContract

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Address of the ERC-20 token to transfer.

  • _receivers

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Array of addresses to receive the tokens.

  • _amounts

    • Control: Arbitrary.

    • Constraints: None.

    • Impact: Corresponding amounts of tokens to be sent to the receivers.

Branches and code coverage

Intended branches

  • Send tokens to the receivers.

Negative behavior

  • Revert if the function is not called by the owner.

Zellic © 2025Back to top ↑