We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Github username: -- Twitter username: -- Submission hash (on-chain): 0xd8d390af931b95da7ddb3bd7203ce81556edca8d82ee8ce8feaea45bc359fd4d Severity: medium
Description: Description The protocol wants to work with the ZetaChain project by creating a staked ZETA token, but since ZetaChain is releasing V2, V1 will be deprecated from what we understand - https://discord.com/channels/858516330432299008/1078765093413736630/1278621840016936961
ZETA
ZetaChain
They use the old ZetaConnector logic with zetaSend here:
ZetaConnector
zetaSend
function deposit(uint256 amount, address receiver) public override nonReentrant { require(amount > 0, "ZeroDeposit"); uint256 mintAmount = previewDeposit(amount); require(mintAmount > 0, "ZeroMintAmount"); baseToken.safeTransferFrom(address(msg.sender), address(this), amount); IZetaInterfaces.SendInput memory sendInput = IZetaInterfaces.SendInput({ destinationChainId: 7000, destinationAddress: abi.encodePacked(destination), destinationGasLimit: 5000000, message: abi.encodePacked(""), zetaValueAndGas: amount, zetaParams: abi.encodePacked("") }); connector.send(sendInput); stakingToken.mint(receiver, mintAmount); emit Deposit(address(msg.sender), receiver, amount); }
But ZetaChain v2 will not have this feature and will use Gateway for all its interactions - https://github.com/zeta-chain/protocol-contracts/blob/main/v2/contracts/evm/GatewayEVM.sol#L236
So this token will become unusable as v1 connectors won't work when v2 is launched.
Attack Scenario Describe how the vulnerability can be exploited.
Recommended Mitigation
Modify the stZETAMInterERC20 logic to work with ZetaChain v2 contracts.
stZETAMInterERC20
The text was updated successfully, but these errors were encountered:
stZETAMInterERC20.sol is out of scope.
stZETAMInterERC20.sol
Sorry, something went wrong.
No branches or pull requests
Github username: --
Twitter username: --
Submission hash (on-chain): 0xd8d390af931b95da7ddb3bd7203ce81556edca8d82ee8ce8feaea45bc359fd4d
Severity: medium
Description:
Description
The protocol wants to work with the ZetaChain project by creating a staked
ZETA
token, but sinceZetaChain
is releasing V2, V1 will be deprecated from what we understand - https://discord.com/channels/858516330432299008/1078765093413736630/1278621840016936961They use the old
ZetaConnector
logic withzetaSend
here:But ZetaChain v2 will not have this feature and will use Gateway for all its interactions - https://github.com/zeta-chain/protocol-contracts/blob/main/v2/contracts/evm/GatewayEVM.sol#L236
So this token will become unusable as v1 connectors won't work when v2 is launched.
Attack Scenario
Describe how the vulnerability can be exploited.
Recommended Mitigation
Modify the
stZETAMInterERC20
logic to work with ZetaChain v2 contracts.The text was updated successfully, but these errors were encountered: