Core Contracts

Summary

The executeBatch() function fails to handle individual transaction failures within a batch, causing the entire batch execution to revert if a single call fails. This can result in a denial of service (DoS) attack, where a malicious or faulty target contract prevents the execution of all valid operations in the batch.

Vulnerability Details

Schedule a batch operation containing multiple function calls to different taarget contract

Include one faulty target contract that always reverts upon execution

call the executeBatch() function

Observe that the entire transaction reverts

Impact

Dos Attach Vector: A malicious contract could intentionally revert, preventing execution of all other calls in a batch.
Operational Inefficiency: if one transaction fails due to gas limits, contract state, or incorrect input data, the entire batch is blocked, even if other transactions are valid.

Tools Used

Manual Review

Recommendations

Instead of reverting the entire batch allow successful transactions to execute and log failed ones: