Potential DoS via Excessively Large Batch Processing in Stake.link's Secondary SDL Pool
Summary
The Stake.link secondary SDL pool smart contract utilizes batch processing for efficiency, but large batch sizes could exceed gas limits and trigger frequent transaction failures. This vulnerability might lead to for denial-of-service (DoS) , impacting user experience and preventing timely action processing.
Vulnerability Details
The smart contract allows queuing lock actions (new locks and updates) in batches for efficiency. However, there is no limit mechanism for a batch size.
Large batch sizes in functions such as _mintQueuedNewLocks and _executeQueuedLockUpdates may lead to gas consumption exceeding individual transaction gas limits or the overall block gas limit. This could result in frequent transaction failures and delays, especially during periods of network congestion.
Impact
Large batch sizes may cause individual transactions to exceed gas limits, resulting in transaction failures.
Tools Used
Manual review
Recommendations
Set Reasonable Batch Size Limits
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.