Summary

Unbounded batch token registration allows potential denial of service through excessive array processing. In AaveDIVAWrapper.sol

Vulnerability Details

Function: batchRegisterCollateralToken()

• Attack Vector: Submitting extremely large arrays of token addresses

• No maximum array length validation

• No gas consumption limits

Impact

• Prevents owner from efficiently registering tokens

• Potential transaction failures

• Increased gas costs

Tools Used

Recommendations

Add maximum array length constraint

require(_collateralTokens.length <= 50, "Batch size too large");