Submission Details
Severity:
If a user makes so many `decreasePosition` requests the `position` function becomes unusable permanently
Vulnerability Details
If a user makes so many decreasePosition requests in 1 day, the length of pendingStakes becomes so large and this may cause to exceed block gas limit. This pendingStakes is used in a for loop in the holderPendingStakes function, which is then used in the position function.
Impact
Holder cannot see its position.
Tools Used
Manual Review
Recommendations
Add a requirement to decreasePosition function that checks minimum stake amount and add pendingStake limit for each user.
Updates
Lead Judging Commences
hrishibhat almost 2 years ago
Submission Judgement Published Assigned finding tags:
pendingstake-dos
hrishibhat almost 2 years ago
Submission Judgement Published Assigned finding tags:
pendingstake-high
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933
USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.