The function `deposit_tokens` does not check the size of the serialized `buf`, which may cause failure due to gas exhaustion when withdrawing on L1.
Summary
The function deposit_tokens does not check the size of the serialized buf, which may cause failure due to gas exhaustion when withdrawing on L1.
Vulnerability Details
The function deposit_tokens does not check the size of the serialized buf, which may cause failure due to gas exhaustion when withdrawing on L1.
Impact
User can not withdraw on L1.
Tools Used
Vscode
Recommendations
Set a upper bound for buf.
Lead Judging Commences
Informational / Gas
Please, do not suppose impacts, think about the real impact of the bug and check the CodeHawks documentation to confirm: https://docs.codehawks.com/hawks-auditors/how-to-determine-a-finding-validity A PoC always helps to understand the real impact possible.
Prize pool breakdown
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.