MagicSea - the native DEX on the IotaEVM: Adding genuine BribeRewarder contract instances to a pool in order to incentivize users can be DOSed

MagicSea's Voter.sol caps each pool at five BribeRewarder contracts per voting period but lets anyone register a rewarder without whitelisting the reward token or imposing a minimum reward amount. An attacker can mint a worthless ERC20, create five rewarder in …