Zellic - Audit Reports

Assessment reports Public findings

Back to Zellic site

Assessment reports>warpdotgreen-cli>Threat Model>updateSupportedChain

GeneralOverview

DiscussionAnyone can emit the SendMessage event directly without transferring tokens Reentrancy in sendMessage by a miner Mismatched transferTip condition between token minting and burning

Threat ModelWhat are threat models?ERC20Bridge.sol MilliETH.sol

Portal.sol initialize receiveMessage rescueAsset rescueEther sendMessage updateMessageToll updateSignatureThreshold updateSigner updateSupportedChain

Audit ResultsAssessment Results

Function: `updateSupportedChain(byte[3] _chainId, bool _supported)`

This function is used to update the supported status of a chain with a given ID. This function is only callable by the contract owner.

Inputs

_chainId
- Control: Arbitrary.
- Constraints: None.
- Impact: Value of the chain ID.
_supported
- Control: Arbitrary.
- Constraints: None.
- Impact: Value of the supported status.

Branches and code coverage

Intended branches

Update the supported status of the chain.
Test coverage

Negative behavior

Revert if the function is not called by the owner.
Negative test
Revert if the new value is the same as the current value.
Negative test

Zellic © 2024Back to top ↑