All reports
highLogic errorSolana-Rust

Olas: Permanent DOS in `liquidity_lockbox` for under $10

Payout
$0
Protocol
Olas
Disclosed
Feb 6, 2024
Source
code4rena

The Olas liquidity_lockbox contract is vulnerable to a permanent denial-of-service attack due to inefficient management of its PDA-based storage. The contract has a hard-coded storage limit of 10 KB for tracking deposit positions, but lacks functionality to pr …

Similar reports

  • No close matches yet.

References

This report is already public and closed. Coin Buggie never publishes active or unpatched vulnerability data.