Description
The total-amount accumulation in execute_batch_partial uses plain addition over the batch's amounts without a checked/saturating operation. A sufficiently large or adversarial batch could overflow i128 accumulation, leading to incorrect settlement totals.
Where
contracts/bulk_payment/src/lib.rs (~line 687-701)
Acceptance Criteria
Description
The total-amount accumulation in
execute_batch_partialuses plain addition over the batch's amounts without a checked/saturating operation. A sufficiently large or adversarial batch could overflowi128accumulation, leading to incorrect settlement totals.Where
contracts/bulk_payment/src/lib.rs(~line 687-701)Acceptance Criteria
checked_add, returning a contract error on overflow