Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Spam attack on transfer_ins table #1

Open
sim31 opened this issue Jul 12, 2019 · 0 comments
Open

Spam attack on transfer_ins table #1

sim31 opened this issue Jul 12, 2019 · 0 comments

Comments

@sim31
Copy link
Owner

sim31 commented Jul 12, 2019

Contract the way it's done now could be attacked by creating bunch of small transfers to some account, to the point where that account couldn't claim any of his tokens.

This happens because mint action has to iterate through all the the rows in transfer_ins table in order to calculate the amount of tokens to be claimed. But this can take a lot of time and exceed the max transaction time, if table contains a lot of rows. Attacker could take advantage of that by spamming the table with small transfers.

One potential solution is to create a new action which could claim for each transfer_in individually.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant