stake.link
stake.link
DeFiHardhatBridge
27,500 USDC
View results
Previous Next
Submission Details
Severity: medium
Invalid

Potential Cross-Chain Compatibility Issues Due to Address Format Restrictions in Stake.link's Whitelisting Mechanism

Jeffauditor

Summary

Stake.link's whitelisting mechanism, specifically the addWhitelistedChain function currently limits address formats to EVM-compatible types. This restriction could hinder future cross-chain interactions with non-EVM chains.

Vulnerability Details

addWhitelistedChain function: Employs the address type for the _destination parameter, implicitly assuming EVM address compatibility.

function addWhitelistedChain(
uint64 _chainSelector,
address _destination,
bytes calldata _updateExtraArgs,
bytes calldata _rewardsExtraArgs
) external onlyOwner {

This could hinder future cross-chain interactions with non-EVM chains such as Polkadot and Tron as it will be difficult to pass them as of address type parameter.

Impact

Prevents seamless cross-chain interactions with non-EVM chains that employ different address formats

Tools Used

Manual Review

Recommendations

Modify addWhitelistedChain to use string type for _destination.

Updates

Lead Judging Commences

0kage Lead Judge almost 2 years ago
Submission Judgement Published
Invalidated
Reason: Design choice

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.