stake.link

Summary

Gas Limit and Loops: The _ccipReceive function contains a loop that iterates over an array of token amounts. If this array is large, it could lead to high gas costs or even exceed block gas limits.

Vulnerability Details

for (uint256 i = 0; i < numRewardTokens; ++i) {
rewardTokens[i] = _message.destTokenAmounts[i].token;
IERC20(rewardTokens[i]).safeTransfer(sdlPool, _message.destTokenAmounts[i].amount);
}

Impact

If this array is large, it could lead to high gas costs or even exceed block gas limits.

Tools Used

Recommendations