Summary

Stake.link's whitelisting mechanism, specifically the addWhitelistedChain function currently limits address formats to EVM-compatible types. This restriction could hinder future cross-chain interactions with non-EVM chains.

Vulnerability Details

addWhitelistedChain function: Employs the address type for the _destination parameter, implicitly assuming EVM address compatibility.

This could hinder future cross-chain interactions with non-EVM chains such as Polkadot and Tron as it will be difficult to pass them as of address type parameter.

Impact

Prevents seamless cross-chain interactions with non-EVM chains that employ different address formats

Tools Used

Manual Review

Recommendations

Modify addWhitelistedChain to use string type for _destination.