Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic site

Assessment reports>warpdotgreen-cli>Threat Model>updateSignatureThreshold

GeneralOverview

DiscussionAnyone can emit the SendMessage event directly without transferring tokens Reentrancy in sendMessage by a miner Mismatched transferTip condition between token minting and burning

Threat ModelWhat are threat models?ERC20Bridge.sol MilliETH.sol

Portal.sol initialize receiveMessage rescueAsset rescueEther sendMessage updateMessageToll updateSignatureThreshold updateSigner updateSupportedChain

Audit ResultsAssessment Results

Function: `updateSignatureThreshold(uint256 _newValue)`

This function is used to update the threshold of required signatures for message verification. This function is only callable by the contract owner.

Inputs

_newValue
- Control: Arbitrary.
- Constraints: Nonzero value.
- Impact: New number of required signatures.

Branches and code coverage

Intended branches

Update the threshold of required signatures.
Test coverage

Negative behavior

Revert if the function is not called by the owner.
Negative test
Revert if the value is zero.
Negative test
Revert if the new value is the same as the current value.
Negative test

Zellic © 2024Back to top ↑