Summary

There are functions that don’t emit events.

Vulnerability Details

Functions:

• Distribution::removeUpgradeability

• L1Sender::setDistribution

• L1Sender::setRewardTokenConfig

• L1Sender::setDepositTokenConfig

• L1Sender::sendDepositToken

• L1Sender::sendMintMessage

• L2TokenReceiver::editParams

• DistributionV2::createPool

• GatewayRouterMock::outboundTransfer

Impact

External users, frontend, or blockchain monitoring won’t announce for these critical functions.

Tools Used

Manual analysis

Recommendations

Add events where possible for critical operations.