Omniscia Sovryn Audit

erc777Converter Manual Review Findings

erc777Converter Manual Review Findings

ERC-01M: Inexistent Override

Description:

The Erc77Converter contract is meant to receive tokens from the bridge that are consequently sent to another address via the onTokensMinted callback.

Example:

sovryn-token-bridge/bridge/contracts/erc777Converter.sol
10contract Erc777Converter is IErc777Receiver, Ownable {

Recommendation:

We advise the tokensReceived function of IErc777Receiver contract to be overridden to only allow transfers from the bridge as otherwise any ERC777 token can be mistakenly sent to the contract and permanently locked.

Alleviation:

The development team has acknowledged this exhibit but decided to not apply its remediation in the current version of the codebase.