Aave DIVA Wrapper

Summary

Batch functions in AaveDIVAWrapper.sol lack array length limits, risking gas limit reverts.

Vulnerability Details

• Location: AaveDIVAWrapper.sol

• Code:

  function batchRegisterCollateralToken(address[] calldata _collateralTokens) external ... {

  for (uint256 i = 0; i < _collateralTokens.length; i++) { ... }

  }

Impact

• Medium: Large arrays may cause transactions to revert, leading to denial-of-service

Tools Used

• Manual code review.

Recommendations

Add array length limits: