zksync/contracts/bridge/L2ETHBridge.sol for these constructor
/ initialize
inputs
- https://github.com/code-423n4/2022-10-zksync/blob/main/zksync/contracts/bridge/L2ETHBridge.sol#L30
- https://github.com/code-423n4/2022-10-zksync/blob/main/zksync/contracts/bridge/L2ERC20Bridge.sol#L32-L34
ethereum/contracts/bridge/L1EthBridge.sol
- https://github.com/code-423n4/2022-10-zksync/blob/main/ethereum/contracts/bridge/L1EthBridge.sol#L48
- https://github.com/code-423n4/2022-10-zksync/blob/main/ethereum/contracts/bridge/L1ERC20Bridge.sol#L57
ethereum/contracts/zksync/DiamondInit.sol
Recommend adding address(0) checks
zksync/contracts/bridge/L2StandardERC20.sol
ethereum/contracts/zksync/DiamondProxy.sol
Recommend fixing decimls
, Cotract
ethereum/contracts/zksync/facets/Mailbox.sol
- https://github.com/code-423n4/2022-10-zksync/blob/main/ethereum/contracts/zksync/facets/Mailbox.sol#L94
- https://github.com/code-423n4/2022-10-zksync/blob/main/ethereum/contracts/zksync/facets/Mailbox.sol#L127
- https://github.com/code-423n4/2022-10-zksync/blob/main/ethereum/contracts/zksync/facets/Mailbox.sol#L169
Recommend implementing or eliminating all TODOS