stake.link

Summary

Growth of arrays in smart contracts, leading to potential out-of-gas errors and a permanent lock of array elements when reaching maximum size.

Vulnerability Details

As these arrays cannot shrink, if the array has a maximum size, it won't be possible to change its elements once it reaches that size. Otherwise, it can grow indefinitely in size, which can increase the likelihood of out-of-gas errors.

Impact

Users might encounter failed transactions due to out-of-gas errors, leading to a loss of funds spent on gas. Moreover, the contract might reach a state where it is no longer possible to update or manage certain elements, leading to a loss of functionality and potentially locking in assets or states permanently.

Tools Used

Manual Review

Recommendations

Integrate functions to remove elements