# Withdrawals in the Maple Pool and Sky Strategy may be DoSed in case the DssLitePsm halts buying Low/Info · Three Sigma · Institutional lending · 26th November, 2024 Finding 3S-Maple-N11 of the Maple Cash Strategies security review. - Protocol: https://maple.finance/ - Report: /reports/maple-finance-iv - Source: https://cdn.sanity.io/files/qoqld077/staging/a68d604be9eca467b1f656c2ca775e1cebc2a468.pdf --- ### Description The [DssLitePsm](https://vscode.blockscan.com/ethereum/0xf6e72Db5454dd049d0788e411b06CfAF16853042), used as part of the Usds Psm wrapper that allows converting fundsAsset to Usds in the Sky Strategy, may be halted by setting tout to type(uint256).max. In this case, MapleSkyStrategy::assetsUnderManagement() would revert due to overflow when calculating the underlying balance of the strategy. As such, withdrawals would be DoSed in the Maple Pool. ### Recommendation The issue can be resolved by setting the pool to inactive, although other solutions are possible. In this case, halting withdrawals may actually be the desired outcome, but it's something to keep in mind. ### Status Acknowledged --- Related findings: - [`ManagedLeveragedVault::executeWithdrawalEpoch()` incorrect ICR and DoSed withdrawals due to not accouting for fees](https://0xsimao.com/findings/beraborrow-i-withdrawal-epoch-withdrawals-fees): Beraborrow Managed Dens - [DoSed withdrawals due to `ManagedLeveragedVault::executeWithdrawalEpoch()` repaying debt above limit](https://0xsimao.com/findings/beraborrow-i-withdrawals-withdrawal-epoch-debt): Beraborrow Managed Dens - [Admin will not be able to only pause deposits in the `Vault` due to incorrect check leading to DoSed withdrawals](https://0xsimao.com/findings/cork-protocol-able-pause-deposits-withdrawals): Cork Protocol - [DoSed StrategyRouter:withdrawFromStrategies() if strategyTokenBalancesUsd[i] is too small in the swapping phase](https://0xsimao.com/findings/clip-finance-i-withdraw-balances-usd-phase): Clip Finance Strategies