Trick or Treat

First Flight #27
Beginner FriendlyFoundry
100 EXP
View results
Submission Details
Severity: high
Invalid

Denial of Service in getTreats function

Summary:

resolveTrickfunction does not reset the treatNames array.

Vulnerability Details:

resolveTrickfunction does not reset the treatNames array. This means, that the array will get bigger and bigger over time, which means calling getTreatsfunction will cost more and more gas. Resulting in a potential Denial of Service.

Impact:

Users will not be able to call the getTreatsfunction.

Tools Used:

Manual review

Recommendations:

In the resolveTrickfunction add a line that will reset the treatNames array.

Or limit the array.

Updates

Appeal created

bube Lead Judge 10 months ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.