- Join Sherlock Discord
- Submit findings using the issue page in your private contest repo (label issues as med or high)
- Read for more details
Deploy Solana-Vault on Solana, and deploy SolConnector on Orderly Chain (OP Stack L2 EVM)
Q: If you are integrating tokens, are you allowing only whitelisted tokens to work with the codebase or any complying with the standard? Are they assumed to have certain properties, e.g. be non-reentrant? Are there any types of weird tokens you want to integrate?
Yes, currently only support USDC deposit on Solana chain
Q: Are there any limitations on values set by admins (or other roles) in the codebase, including restrictions on array lengths?
No limitation on values
Q: Are there any limitations on values set by admins (or other roles) in protocols you integrate with, including restrictions on array lengths?
No
Q: For permissioned functions, please list all checks and requirements that will be made before calling the function.
Require caller is Owner/Admin account/address
Q: Is the codebase expected to comply with any EIPs? Can there be/are there any deviations from the specification?
No, it is a Solana program
Q: Are there any off-chain mechanisms for the protocol (keeper bots, arbitrage bots, etc.)? We assume they won't misbehave, delay, or go offline unless specified otherwise.
No
Q: If the codebase is to be deployed on an L2, what should be the behavior of the protocol in case of sequencer issues (if applicable)? Should Sherlock assume that the Sequencer won't misbehave, including going offline?
We hold the L2, Sequencer won't misbehave
The USDC balance of Vault pgram on Solana is no less than the Vault balance record on Ledger contract on Orderly chain
Front-running during PDA initialisation is considered known and acceptable.
Q: We will report issues where the core protocol functionality is inaccessible for at least 7 days. Would you like to override this value?
No
No
sol-cc @ dc99b068cda9a6067b35edf629acd1730e5982a3
- sol-cc/contracts/SolConnector.sol
- sol-cc/contracts/interface/ILedger.sol
- sol-cc/contracts/interface/ISolConnector.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/OAppCoreUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/OAppReceiverUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/OAppSenderUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/OAppUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppComposer.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppCore.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppMsgInspector.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppOptionsType3.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppReceiver.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/libs/OAppOptionsType3Upgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/libs/OptionsBuilder.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/utils/RateLimiter.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/OAppPreCrimeSimulatorUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/PreCrime.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/extensions/PreCrimeE1.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/interfaces/IOAppPreCrimeSimulator.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/interfaces/IPreCrime.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/libs/Packet.sol
- sol-cc/contracts/library/MsgCodec.sol
- sol-cc/contracts/library/Utils.sol
solana-vault @ bd8b6dbeb3300319fd9dad262298ec0cd1152344
- solana-vault/packages/solana/contracts/programs/solana-vault/src/errors.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/events.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/mod.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/msg_codec.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/init_oapp.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/mod.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/oapp_lz_receive.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/oapp_lz_receive_types.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/oapp_quote.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/reinit_oapp.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/reset_oapp.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/set_delegate.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/set_enforced_options.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/set_peer.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/set_rate_limit.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/oapp_instr/transfer_admin.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/seeds.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/type_utils.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/vault_instr/deposit.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/vault_instr/init_vault.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/vault_instr/mod.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/vault_instr/reinit_vault.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/vault_instr/reset_vault.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/vault_instr/set_broker.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/vault_instr/set_order_delivery.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/instructions/vault_instr/set_token.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/lib.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/mod.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/oapp_state/enforced_options.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/oapp_state/mod.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/oapp_state/oapp_config.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/oapp_state/peer.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/vault_state/allowed_broker.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/vault_state/allowed_token.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/vault_state/mod.rs
- solana-vault/packages/solana/contracts/programs/solana-vault/src/state/vault_state/vault_authority.rs
sol-cc @ dc99b068cda9a6067b35edf629acd1730e5982a3
- sol-cc/contracts/SolConnector.sol
- sol-cc/contracts/interface/ILedger.sol
- sol-cc/contracts/interface/ISolConnector.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/OAppCoreUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/OAppReceiverUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/OAppSenderUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/OAppUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppComposer.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppCore.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppMsgInspector.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppOptionsType3.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/interfaces/IOAppReceiver.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/libs/OAppOptionsType3Upgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/libs/OptionsBuilder.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/oapp/utils/RateLimiter.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/OAppPreCrimeSimulatorUpgradeable.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/PreCrime.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/extensions/PreCrimeE1.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/interfaces/IOAppPreCrimeSimulator.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/interfaces/IPreCrime.sol
- sol-cc/contracts/layerzerolabs/lz-evm-oapp-v2/contracts/precrime/libs/Packet.sol
- sol-cc/contracts/library/MsgCodec.sol
- sol-cc/contracts/library/Utils.sol
