MorpheusAI

Summary

In the lzReceive function, the contract is using the config.gateway address to verify if the caller is the expected gateway. Therefore, the require statement will revert the transaction if the condition is not met.

Vulnerability Details

Here's the relevant part of the code:

This line ensures that the function is only executed if the caller _msgSender() is the address specified in config.gateway.

Impact

The require statement will revert the transaction if the condition is not met, providing a basic access control mechanism.

Tools Used

Recommendations

To ensure that the config.gateway address is set correctly , you should consider the following: