feat: LayerZeroOFT decoder verifies the refundReceiver. Deletes Starg…

…ateV2 Decoder
Ion-Protocol · Oct 2, 2024 · 496c468 · 496c468
1 parent 5721dcc
commit 496c468
Show file tree

Hide file tree

Showing 2 changed files with 1 addition and 47 deletions.
diff --git a/src/base/DecodersAndSanitizers/LayerZeroOFTDecoderAndSanitizer.sol b/src/base/DecodersAndSanitizers/LayerZeroOFTDecoderAndSanitizer.sol
@@ -33,7 +33,7 @@ contract LayerZeroOFTDecoderAndSanitizer is BaseDecoderAndSanitizer {
         view
         returns (bytes memory)
     {
-        if (bytes32ToAddress(_sendParam.to) != boringVault) {
+        if (bytes32ToAddress(_sendParam.to) != boringVault || refundReceiver != boringVault) {
             revert LayerZeroOFTDecoderAndSanitizer_NotVault();
         }
         if (_sendParam.composeMsg.length > 0) {

diff --git a/src/base/DecodersAndSanitizers/StargateV2DecoderAndSanitizer.sol b/src/base/DecodersAndSanitizers/StargateV2DecoderAndSanitizer.sol