AndreiMVP
commented
2 weeks ago This is not an issue. The lister can submit a list of a length that doesn't revert due to gas limit
A malicious user could attempt a bulk operation that exceeds the gas limit, preventing the function from executing
Well, bad for him.
Set a Limit on the Number of Addresses per Transaction
The gas limit is that limit
Github username: -- Twitter username: 4n0n_x Submission hash (on-chain): 0xe89316f61cbe0531bea147aff5576e14a7a75dc5387913aa8dd12f86ca3fcb0f Severity: low
Description: Description\ The whitelist and blacklist functions in Validator accept arrays of addresses without limiting their size. Large arrays could cause transactions to exceed the block gas limit, leading to transaction failures and potential denial-of-service.
Impact\ A malicious user could attempt a bulk operation that exceeds the gas limit, preventing the function from executing. This could temporarily disrupt the system by making these functions unusable.
Recommendation\
Set a Limit on the Number of Addresses per Transaction: Enforce a reasonable limit on the number of addresses processed in each transaction.
Consider Batch Processing with Off-Chain Signatures: For higher efficiency, consider implementing batch processing with off-chain signatures to reduce on-chain gas consumption.