Beanstalk Part 1

Vulnerability Details

The transferDeposits function lacks checks to limit the lengths of the stem and amounts arrays provided as calldata. This could allow an attacker to call the function with excessively large arrays, leading to excessive gas consumption and potential transaction failure.

Impact

1. Users may experience transaction failures due to out-of-gas errors, resulting in gas wasted without state changes.

2. Users attempting to execute the function could incur unnecessary gas costs.

Tools Used

Manual review

Recommendations

1. Introduce a maximum limit on the size of the stem and amounts arrays to prevent excessive iteration and gas consumption.

2. Implement gas checks to ensure transactions remain within the block gas limit.