Submission Details
Severity:
The functions which call `consolidatePendingStakes` and `deletePendingStake` could get DOS-ed if `pendingStakes` ends up having many items in the array.
Vulnerability Details
The function consolidatePendingStakes iterates twice through the pendingStakes array one in the function itself and later in deletePendingStake in the flow. If there are lot of items in the array, the function could run out of gas, and all functions which call consolidatePendingStakes would become inaccessible for the protocol users.
Impact
Functions which call consolidatePendingStakes becomes inaccessible.
Tools Used
Manual
Recommendations
Improve logic, or gain control over pendingStakes similar to other arrays.
Updates
Lead Judging Commences
hrishibhat almost 2 years ago
Submission Judgement Published Assigned finding tags:
pendingstake-dos
Prize pool breakdown
Total prize
20,000 USDC
nSLOC
60933
USDC / LOC
17,500 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.