The Standard

Summary

Attacker can add multiple address to the holders array variable using the increasePosition with 1 wei worth of asset value causing multiple operation that iterate through this array to revert or too expensive to execute to easily break the protocol, rendering the contract non-useable

Vulnerability Details

The increasePosition checks that only a unique address is added to the holders array, however an attacker can still execute this with multiple addresses.
Attacker can add multiple address to the holders array variable using the increasePosition with 1 wei worth of asset value

Impact

Multiple operation that iterate through this array will revert or too expensive to execute easily breaking the protocol and rendering the contract non-useable

Tools Used

Manual Review

Recommendations

Add a cap to number of holders