Submission Details
Impact:
Likelihood:
Unlimited Pending / Dust Transaction Proposals
Author Revealed upon completion
Root + Impact
Description
Normal behavior:
Transaction proposals are recorded without immediate execution.Issue:
The owner can create unlimited low-value or dust transactions that remain pending indefinitely.
function proposeTransaction(address to, uint256 value, bytes calldata data)
external
onlyOwner
Risk
Likelihood:
-
Occurs during testing, misuse, or malicious governance
Occurs naturally in long-lived contracts
Impact:
-
Storage bloat
Poor UX
Increased indexing cost
Proof of Concept
for (uint256 i = 0; i < 10000; i++) {
proposeTransaction(address(0x123), 1 wei, "");
}
Recommended Mitigation
+ require(value >= MIN_TRANSACTION_VALUE);
Rewards breakdown
nSLOC
205This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.
Rewards Distribution
The contest is complete and the rewards are being distributed.