Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic site

Assessment reports>warpdotgreen-cli>Threat Model>updateMessageToll

GeneralOverview

DiscussionAnyone can emit the SendMessage event directly without transferring tokens Reentrancy in sendMessage by a miner Mismatched transferTip condition between token minting and burning

Threat ModelWhat are threat models?ERC20Bridge.sol MilliETH.sol

Portal.sol initialize receiveMessage rescueAsset rescueEther sendMessage updateMessageToll updateSignatureThreshold updateSigner updateSupportedChain

Audit ResultsAssessment Results

Function: `updateMessageToll(uint256 _newValue)`

This function is used to update the message toll fee required to send messages. This function is only callable by the contract owner.

Inputs

_newValue
- Control: Arbitrary.
- Constraints: None.
- Impact: New toll fee.

Branches and code coverage

Intended branches

Update the message toll fee.
Test coverage

Negative behavior

Revert if the function is not called by the owner.
Negative test
Revert if the new value is the same as the current value.
Negative test

Zellic © 2024Back to top ↑