Skip to content
high Denial of Service SWC-128 CWE-400

Out-of-Gas in Loop Causing Stuck Funds

SAFE-0080 Denial of Service Checked automatically by the scanner
1

What goes wrong

A withdrawal/settlement loop grows with participation; past a threshold the only function that releases funds runs out of gas, permanently locking user balances.

2

How to fix it

the pattern that is safe
function withdrawMine() external nonReentrant {
    uint a = owed[msg.sender]; owed[msg.sender]=0; _send(msg.sender,a);
}
◆
Ensure a per-user pull path exists.
3

Related vulnerabilities in Denial of Service

SAFE-0037DoS via Unexpected Revert in Loop / Push Payments high · Denial of Service SAFE-0038DoS via Unbounded Loop / Gas Exhaustion high · Denial of Service SAFE-0040Locked Ether / No Withdrawal Path high · Denial of Service SAFE-0124Push-Payment DoS (Loop of External Transfers) high · Denial of Service SAFE-0039Gas Griefing via Subcall Gas Forwarding medium · Denial of Service SAFE-0041Forced Ether Reception Breaking Balance Invariants medium · Denial of Service SAFE-0098Insufficient Withdrawal / Pull Pattern Not Enforced medium · Denial of Service SAFE-0214Unbounded Batch Mint / Airdrop Loop medium · Denial of Service
← PreviousOutdated Compiler / Known Compiler Bug Exposure
Check your own contract for this

The SaferICO scanner runs 201 detectors over your Solidity source, SAFE-0080 among them. Paste an address or the source itself — a small per-scan fee, shown before you sign, or unlimited on any plan.

Run the scanner See how it is attacked Read the docs