Skip to content
Request an audit

‹ Findings database

Gas forwarded by the CurveGaugeDistributor could be limited to further prevent OOG

Low/InfoFelix Price Feeds audit·by 0xSimao·CDP stablecoin·14th March 2025I-4

Description:

CurveGaugeDistributor::distributeRewardsToGauge() calls the external contract without limiting the gas sent, which could lead to OOG in case it becomes malicious.

Recommended Mitigation:

To prevent this, ExcessivelySafeCall can be used.

Source

Disclosed by 0xSimao · Sherlock's 2025 Watson of the Year · 21 first places in 57 audit contests