Merge pull request #89 from Tapioca-DAO/CU-85ztxzhem-exercise-option-…

…whitelist CU-85ztxzhem: whitelist exercise option
Tapioca-DAO · Sep 21, 2023 · 598b790 · 598b790
2 parents 1523f6a + 58f0212
commit 598b790
Showing 1 changed file with 13 additions and 0 deletions.
diff --git a/contracts/tOFT/modules/BaseTOFTOptionsModule.sol b/contracts/tOFT/modules/BaseTOFTOptionsModule.sol
@@ -85,6 +85,14 @@ contract BaseTOFTOptionsModule is TOFTCommon {
         ICommonData.IApproval[] calldata approvals,
         bytes calldata adapterParams
     ) external payable {
+        require(
+            cluster.isWhitelisted(
+                lzData.lzDstChainId,
+                tapSendData.tapOftAddress
+            ),
+            "TOFT_UNAUTHORIZED"
+        ); //fail fast
+
         bytes32 toAddress = LzLib.addressToBytes32(optionsData.from);
 
         (uint256 paymentTokenAmount, ) = _removeDust(
@@ -190,6 +198,11 @@ contract BaseTOFTOptionsModule is TOFTCommon {
                 )
             );
 
+        require(
+            cluster.isWhitelisted(0, tapSendData.tapOftAddress),
+            "TOFT_UNAUTHORIZED"
+        ); //fail fast
+
         optionsData.paymentTokenAmount = _sd2ld(amountSD);
         uint256 balanceBefore = balanceOf(address(this));
         bool credited = creditedPackets[_srcChainId][_srcAddress][_nonce];