Skip to content

Add initLimitsAndControllerData#10

Open
oldchili wants to merge 1 commit intodevfrom
init-data-in-spell
Open

Add initLimitsAndControllerData#10
oldchili wants to merge 1 commit intodevfrom
init-data-in-spell

Conversation

@oldchili
Copy link
Contributor

@oldchili oldchili commented Mar 6, 2026

No description provided.

@octane-security-app
Copy link

Summary by Octane

New Contracts

No new contracts were added.

Updated Contracts

  • PASInit.sol: The smart contract now includes initialization for rate limits and controller actions with respective configurations.

🔗 Commit Hash: 30fddbf

@oldchili oldchili requested review from sunbreak1211 and telome March 6, 2026 04:11
@octane-security-app
Copy link

Overview

Warnings found: 4                                                                                

Warnings

deploy/PASInit.sol

  • Unvalidated address(0) wildcard writes in PASInit.initLimitsAndControllerData cause unintended global defaults and sweeping controller action enablement. See more
  • Untyped raw-bytes allowlisting in PASInit.initLimitsAndControllerData causes unintended controller role grants via selector mistakes. See more
  • Missing BeamState consistency check in PASInit.initLimitsAndControllerData causes mis-targeted writes and cBeam DoS. See more

src/BeamState.sol

  • Missing length validation for controller action bytes in PASInit.initLimitsAndControllerData causes accidental allowlisting of empty/truncated calldata. See more

🔗 Commit Hash: 30fddbf
🛡️ Octane Dashboard: All vulnerabilities

@oldchili oldchili marked this pull request as ready for review March 7, 2026 06:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant