Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Darinrikusham - There is no restriction on the number of invitees in the param in bulkInviteAddresses function in EthosProfile contract which could lead to out of bound gas issue. #302

Open
sherlock-admin3 opened this issue Nov 4, 2024 · 0 comments

Comments

@sherlock-admin3
Copy link
Contributor

sherlock-admin3 commented Nov 4, 2024

Darinrikusham

Medium

There is no restriction on the number of invitees in the param in bulkInviteAddresses function in EthosProfile contract which could lead to out of bound gas issue.

Summary

No check on number of invitees allowed in bulkInviteAddresses function in EthosProfile contract could lead to out of bound gas issue when users tries to input more invitees together.

Root Cause

No restriction on amount of invitees that can be added in bulkInviteAddresses function could lead to out of bound gas issue when users try to add more values of invitees together in single transaction.

Internal pre-conditions

No response

External pre-conditions

No response

Attack Path

No response

Impact

No response

PoC

No response

Mitigation

  • Check and restriction on number of invitees in bulkInviteAddresses function on single transaction.
@sherlock-admin4 sherlock-admin4 changed the title Tart Coral Jay - There is no restriction on the number of invitees in the param in bulkInviteAddresses function in EthosProfile contract which could lead to out of bound gas issue. Darinrikusham - There is no restriction on the number of invitees in the param in bulkInviteAddresses function in EthosProfile contract which could lead to out of bound gas issue. Nov 20, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant