Summary

Well::init is Denial of Service prone.

Vulnerability Details

The nested loop structure makes the function susceptible to DoS bug. Operations with a very large _tokens array in the tokens() call, Will significantly increasing the number of comparisons needed and causing the initialization to be very slow or fail due to gas limitations.

Impact

The function call may slow down operation calls or completely freeze due to gas limitations caused by nested loop.

Tools Used:

Slither

Recommendations

Should consider Implementing a more efficient duplicate checking mechanism which isnt gas intensive.