Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic site

Assessment reports>warpdotgreen-cli>Threat Model>updateSigner

GeneralOverview

DiscussionAnyone can emit the SendMessage event directly without transferring tokens Reentrancy in sendMessage by a miner Mismatched transferTip condition between token minting and burning

Threat ModelWhat are threat models?ERC20Bridge.sol MilliETH.sol

Portal.sol initialize receiveMessage rescueAsset rescueEther sendMessage updateMessageToll updateSignatureThreshold updateSigner updateSupportedChain

Audit ResultsAssessment Results

Function: `updateSigner(address _signer, bool _newValue)`

This function is used to update the authorization status of a signer (validator). This function is only callable by the contract owner.

Inputs

_signer
- Control: Arbitrary.
- Constraints: Nonzero address.
- Impact: Address of the signer to update.
_newValue
- Control: Arbitrary.
- Constraints: None.
- Impact: New authorization status (true for authorized, false for not authorized).

Branches and code coverage

Intended branches

Update the authorization status of the signer.
Test coverage

Negative behavior

Revert if the function is not called by the owner.
Negative test
Revert if the signer address is zero.
Negative test
Revert if the status is not different.
Negative test

Zellic © 2024Back to top ↑