TempleGold

Summary

The TempleGoldStaking contract is vulnerable to Denial of Service attacks... Which can stop the contract.

Vulnerability Details

Here is the staking function in the said contract:

This contract can be DoSed from two standpoints:

1. a threat actor can keep sending 0 amount, or similarly minute amount, so much to the contract. The contract can lag or stop functioning when it can no longer handle such dusty or minute amounts, secondly

2. a zero address can keep spamming the contract

Possibly, a threat actor can leverage these two standpoints by continuously sending 0 amounts with millions of zero addresses. Ultimately, this will lead to a DoS attack for the contract.

Impact

Denial of Service.

Tools Used

Manual Review.

Recommendations

• check against zero addresses and 0 amounts.