Omniscia Mantissa Finance Audit

MNTS Manual Review Findings

MNTS Manual Review Findings

MNT-01M: Dependency Limitation

TypeSeverityLocation
Language SpecificMNTS.sol:L4

Description:

The MNTS contract inherits from the V1 implementation of the OFT token standard by LayerZero. As such, it is not compatible with non-EVM chains (i.e. Solana, Aptos, et al.).

Example:

contracts/MNTS.sol
4import {OFT} from "@layerzerolabs/solidity-examples/contracts/token/oft/OFT.sol";
5
6contract MNTS is OFT {
7 constructor(address _layerZeroEndpoint, address treasury, uint256 initSupply) OFT("Mantis", "MNTS", _layerZeroEndpoint) {
8 if (treasury != address(0) && initSupply > 0) {
9 _mint(treasury, initSupply);
10 }
11 }
12
13 function burn(uint256 amount) external {
14 _burn(msg.sender, amount);
15 }
16}

Recommendation:

If the Mantissa team wishes to remain compatible solely with EVM chains, this exhibit can be safely ignored.

Alternatively, we advise the V2 implementation of OFT to be considered which supports non-EVM chains when relaying cross-chain messages.

Alleviation (418ee413ad8e26f7eea383764c19953ff31b2bf3):

The Mantissa Finance team evaluated this exhibit and stated that they wish to remain compatible with EVM-only chains and as such the base OFT dependency is sufficient for their intents and purposes.

As such, we consider this exhibit nullified given that the Mantissa Finance team has selected the correct dependency for their project.