IDEX

The `loadAssetBySymbol` function inside `AssetRegistry.sol` contains a for-loop over all assets registered with the same symbol (see L100). If there are too many assets registered with the same symbol, this function would revert due to reaching the block-gas-limit. Although this is unlikely to be an issue in practice (the number of token contract update are likely to be small), in theory, reaching the gas-block-limit is still possible.

Smart contracts will often have `owner` and/or `admin` roles to designate the person with special privileges to make modifications to the smart contract and/or other components (e.g., dispatcher wallet). However, this centralization of power needs to be made clear to the users, especially depending on the level of privilege the contract allows to the owner.

All the functions in `Signatures.sol` and `AssetTransfers.sol` lack unit tests; however, we acknowledged that they are being indirectly checked by `deposit` and `withdraw` testing flows in the test suite. We suggest, nonetheless, having dedicated unit tests for all functions, testing different input combinations.

Currently, after registering a new token, it cannot be de-registered. Thus, if an incorrect token registration occurs, it cannot be undone unless one performs a new contract deployment and migrates all correctly registered tokens.