Submission Details
Severity:
DistributionV2:: createPool() is subjected to DOS attacks
Vulnerability Details
IN DistributionV2:: createPool()
function createPool(IDistribution.Pool calldata pool_) public {//@audit DOS
pools.push(pool_);
}```
Attacker can call this function many times - in the same transaction as long as the gas limit not exceeded- causing the array to be filled and then this call will never be working for anyone.
## Impact
expected denail of service
## Tools Used
Manual review
## Recommendations
Make the function onlyOwner and check for the validity of inputs
Updates
Lead Judging Commences
inallhonesty almost 2 years ago
Submission Judgement Published Assigned finding tags:
`createPool` from DistributionV2.sol misses all the checks and access control available in Distribution.sol
inallhonesty almost 2 years ago
Submission Judgement Published Assigned finding tags:
`createPool` from `DistributionV2.sol` misses all the checks and access control available in `Distribution.sol`
Prize pool breakdown
Total prize
22,500 USDC
nSLOC
1,05421
USDC / LOC
20,000 USDC
2,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.