Conflux Deployment, USDT0 and CNHT0

The CHNT token on mainnet returns a false boolean value upon transfer since StandardTokenWithFees.transfer does not explicitly return a bool, defaulting to false:

  function transfer(address _to, uint _value) public returns (bool) {
    uint fee = calcFee(_value);
    uint sendAmount = _value.sub(fee);

    super.transfer(_to, sendAmount);
    if (fee > 0) {
      super.transfer(owner(), fee);
    }
  }

Consequently, whenever an lzReceive message is received by the OFT on mainnet, any attempt to transfer will fail due to SafeERC20 reverting with SafeERC20FailedOperation, as the false return is interpreted as a failed transfer.

(Figure. See the PDF report.)

Adjust the _credit and _debit functions of the OFT Adapter on mainnet to avoid the safeTransfer.

The delegate for CHNT0** OFT 0x0200C29006150606B650577BBE7B6248F58470c1 **on Conflux is 0x1a6362AD64ccFF5902D46D875B36e8798267d154 which is not a multi-sig nor does it match the Safe address of 0x789498616f3Bb9F8dF52288A9311247028872105.

Set the delegate to 0x789498616f3Bb9F8dF52288A9311247028872105

Chains Flare and Monad are not wired for the latest USDT0 deployment on Conflux.

Ensure this is expected behavior.

Both Conflux and Mantle Safes have duplicate nonce 40, hence the second transaction to setReceiveLibrary will revert with LZ_SameValue(). (Figure. See the PDF report.)

Remove the duplicate tx.

Celo Safe has signers:

1. 0x4192D72c281dB0eF10464dD274EE583C33256ac5
2. 0x00F6D2b4B69Ce697f913Da16A9D73283dc4C78F2
3. 0x488A3d37442F583c1c0a356118d1d6181b22434c
4. 0x7D8e979dcC6EC933c70FBe28B2B7700907D2aFEA
5. 0x5F0DcA105195Bd58277aa4b4CABC90a791E1b982 But the Conflux Safe at 0x789498616f3Bb9F8dF52288A9311247028872105 has signers:
6. 0x1a6362AD64ccFF5902D46D875B36e8798267d154
7. 0x7D8e979dcC6EC933c70FBe28B2B7700907D2aFEA
8. 0x488A3d37442F583c1c0a356118d1d6181b22434c
9. 0x4192D72c281dB0eF10464dD274EE583C33256ac5
10. 0x5F0DcA105195Bd58277aa4b4CABC90a791E1b982

0x00F6D2b4B69Ce697f913Da16A9D73283dc4C78F2 is missing from the Conflux Safe and 0x1a6362AD64ccFF5902D46D875B36e8798267d154 was added.

Ensure the signers are intended on the Conflux Safe.

Peers and configs are not currently set for Conflux and other chains, hence the existing block confirmations/DVN’s/etc. do not currently match the intended configs.

Ensure intended configs are set before cross-chain transfer is allowed.

Unlike the USDT token, the CNHT token reverts on zero address transfer. Hence debited funds on src chain will not be credited on mainnet and the LayerZero message will be unfulfilled.

Clearly document this behavior and consider crediting address(0) funds to the 0xdead address.