Summary

It may be impossible to distribute the rewards due to the Gas limit DoS.

Vulnerability Details

The _distribute function allows to distribute the rewards to the 9500 winners (10000 - COMMISSION_FEE) and all the amount on the balance is distributed per 1 distribution.

Impact

Due to the fact that the contract functionality allows to distribute all the tokens balance per 1 distribution, it may be impossible to transfer the winning rewards to all the correct winners.

Tools Used

VS Code

Recommendations

Add the parameter to the distribution function that will define how many tokens should be distrubited per transaction and allow to distribute the rewards during more than 1 call.