Summary

In Nexus.sol, there's a missing check for executor removal, which potentially leads to a Denial of Service (DoS) scenario.

Vulnerability Details

In Nexus.sol, there is a function _uninstallExecutor that removes executors from the protocol without verifying if at least one executor remains installed. This contrasts with _uninstallValidator, which includes a check to prevent the removal of the last validator. Here’s the vulnerable code snippet:

Impact

This vulnerability could potentially lead to a situation where all executors are removed from the protocol. As a result, functionalities like this within Nexus.sol that depend on executors would become unavailable, potentially disrupting the protocol's operation and leading to a denial of service.

Tools Used

Manual Code Review

Recommendations

Modify _uninstallExecutor to include a check ensuring that at least one executor remains installed before allowing any to be uninstalled: