sherlock-audit / 2023-09-Gitcoin-judging

11 stars 7 forks source link

John_Femi - Multiple places of unbounded loops #985

Closed sherlock-admin2 closed 11 months ago

sherlock-admin2 commented 11 months ago

John_Femi

medium

Multiple places of unbounded loops

There are multiple instances of unbounded loops

Vulnerability Detail

There are multiple instances of unbounded loops in the Allo and Registry contract, which could cause gas issues based on gas limit or DOS

Impact

High cost of usage, Reverted calls with external calls state changed

Code Snippet

https://github.com/sherlock-audit/2023-09-Gitcoin/blob/main/allo-v2/contracts/core/Registry.sol#L150

Tool used

Manual Review

Recommendation

Add checks for length of input before looping and add a max value of data to be looped at a time

sherlock-admin commented 11 months ago

1 comment(s) were left on this issue during the judging contest.

n33k commented:

invalid