Alchemix Transmuter

Summary

The addRoute function in the StrategyMainnet contract allows unlimited addition of routes, leading to potential Denial of Service (DoS) attacks by consuming all available storage and increasing gas costs prohibitively.

Vulnerability Details

The addRoute function allows for an unlimited number of routes to be added. This can be exploited by an attacker to continuously add routes, consuming all available storage and making the contract unusable due to high gas costs.

Impact

Denial of Service: The contract can become unusable as it will be prohibitively expensive to perform any operations due to high gas costs.

Storage Abuse: Excessive storage consumption can lead to reaching the block gas limit, preventing further transactions.

Tools Used

Manual Review

Recommendations

Implement a limit on the number of routes that can be added.