Omniscia Mantissa Finance Audit
MNTS Manual Review Findings
MNTS Manual Review Findings
MNT-01M: Dependency Limitation
Type | Severity | Location |
---|---|---|
Language Specific | MNTS.sol:L4 |
Description:
The MNTS
contract inherits from the V1 implementation of the OFT
token standard by LayerZero. As such, it is not compatible with non-EVM chains (i.e. Solana, Aptos, et al.).
Example:
4import {OFT} from "@layerzerolabs/solidity-examples/contracts/token/oft/OFT.sol";5
6contract MNTS is OFT {7 constructor(address _layerZeroEndpoint, address treasury, uint256 initSupply) OFT("Mantis", "MNTS", _layerZeroEndpoint) {8 if (treasury != address(0) && initSupply > 0) {9 _mint(treasury, initSupply);10 }11 }12
13 function burn(uint256 amount) external {14 _burn(msg.sender, amount);15 }16}
Recommendation:
If the Mantissa team wishes to remain compatible solely with EVM chains, this exhibit can be safely ignored.
Alternatively, we advise the V2 implementation of OFT
to be considered which supports non-EVM chains when relaying cross-chain messages.
Alleviation (418ee413ad8e26f7eea383764c19953ff31b2bf3):
The Mantissa Finance team evaluated this exhibit and stated that they wish to remain compatible with EVM-only chains and as such the base OFT
dependency is sufficient for their intents and purposes.
As such, we consider this exhibit nullified given that the Mantissa Finance team has selected the correct dependency for their project.