Submission Details
Severity:
The functions which call `consolidatePendingStakes` and `deletePendingStake` could get DOS-ed if `pendingStakes` ends up having many items in the array.
Vulnerability Details
The function consolidatePendingStakes iterates twice through the pendingStakes array one in the function itself and later in deletePendingStake in the flow. If there are lot of items in the array, the function could run out of gas, and all functions which call consolidatePendingStakes would become inaccessible for the protocol users.
Impact
Functions which call consolidatePendingStakes becomes inaccessible.
Tools Used
Manual
Recommendations
Improve logic, or gain control over pendingStakes similar to other arrays.
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933 USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.