Submission Details
Severity:
Possible DOS in BuyCreditLimit Due to Unbounded Array
Description
The configureCollateralLiquidationPriority and configureLiquidators functions in GlobalConfigurationBranch library emits events with unbounded arrays, potentially causing out-of-gas errors.
Code Snippet
File: src/perpetuals/branches/GlobalConfigurationBranch.sol
function configureCollateralLiquidationPriority(address[] calldata collateralTypes) external onlyOwner {
/// ... existing code ...
emit LogConfigureCollateralLiquidationPriority(msg.sender, collateralTypes);
}
function configureLiquidators(address[] calldata liquidators, bool[] calldata enable) external onlyOwner {
/// ... existing code ...
emit LogConfigureLiquidators(msg.sender, liquidators, enable);
}
Recommendations
Implement a maximum limit for the number of elements in the collateralTypes and liquidators arrays.
Prize pool breakdown
Total prize
60,000 USDC
nSLOC
2,87821 USDC / LOC
50,000 USDC
5,500 USDC
4,500 USDC
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.