Liquid Staking

Summary

Vulnerability Details

address[] private strategies; is a dynamic array which can grow to a very large list. Across the whole staking pool contract lot's of functions including removeStrategy traverse through this strategies list. At some point traversing through a big strategies list might run out of gas. If the owner is not careful it might even break removeStrategy function, which will render the whole contract inoperable.

Impact

Dynamic strategies list might lead to accidental DOS attack.

Tools Used

Manual

Recommendations

It is good to have hard cap strategies list.