Skip to content

Comments

N-08/N-13: Tighten visibilities and add bounds check in isClaimAuthorized#30

Merged
mgretzke merged 2 commits intov1-audit1from
fix/n08-n13-vis-and-bounds
Dec 8, 2025
Merged

N-08/N-13: Tighten visibilities and add bounds check in isClaimAuthorized#30
mgretzke merged 2 commits intov1-audit1from
fix/n08-n13-vis-and-bounds

Conversation

@ccashwell
Copy link
Member

Summary

  • OnChainAllocator:
    • Make helpers private: _updateCommitmentsAndStoreAllocation, _executeAllocation, _checkBalance, _storeAllocation overloads, _allocatedBalance, _verifyClaim, _getTokenHash overloads.
    • Change authorizeClaim and isClaimAuthorized to external (was public).
    • Add idsAndAmounts.length check in isClaimAuthorized to avoid OOB access per N-13.

External API remains the same; visibility conveys intent and saves some gas.

…thorized (N-08, N-13)

- Change several internal helpers to private; change isClaimAuthorized/authorizeClaim to external.
- Add idsAndAmounts length check in isClaimAuthorized to avoid out-of-bounds (panic 0x32).
@ccashwell ccashwell requested a review from a team as a code owner September 11, 2025 14:59
@mgretzke mgretzke merged commit 0a9e6dc into v1-audit1 Dec 8, 2025
4 checks passed
@mgretzke mgretzke deleted the fix/n08-n13-vis-and-bounds branch December 9, 2025 12:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants