The functions setSigner and sendToL1 are not emitting an event after making state changing operations.
Add events to these functions.
DEPOSIT_LIMIT should be declared as constantL1BossBridge does not define a method to update DEPOSIT_LIMIT after the deployment of the contract and for this reason its value will never change so the variable can be safely declared as a constant.
Mark the variable as constant.
token in L1Vault should be declare as immutableDuring the deployment of the bridge, a single vault is created to handle one token for deposits.
Considering the vault does not provide a method to update the allowed token and it's value is initialized in the constructor of the vault then the variable should me marked as immutable.
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.