Zellic - Audit Reports

Assessment reports>Wasabi Perps>Discussion>The difficulty of analyzing code that relies on offchain components

GeneralOverview

Findings

Critical (2)

DiscussionLimited test coverage The difficulty of analyzing code that relies on offchain components

Threat ModelWhat are threat models?BaseWasabiPool.sol DebtController.sol WasabiLongPool.sol WasabiShortPool.sol WasabiVault.sol

Audit ResultsSummary

The difficulty of analyzing code that relies on offchain components

It is difficult to analyze code that depends on off-chain components providing arbitrary call targets and calldata.

Merely examining the contract code does not give the specific call targets and an array of calldata in use. A comprehensive audit, encompassing both the backend and frontend, is essential to ascertain the details of these call parameters.