Submitted by 0xA5DF, also found by 0x52
HolographOperator.sol#L415
When a beaming job is executed, theres a requirement that the gas left would be at least as the gasLimit set by the user.
Given that theres no limit on the gasLimit the user can set, a user can set the gasLimit to amount thats higher than the block gas limit on the dest chain, causing the operator to fail to execute the job.
Operators would be locked out of the pod, unable to execute any more jobs and not being able to get back the bond they paid.
The attacker would have to pay a value equivalent to the gas fee if that amount was realistic (i.e. gasPrice * gasLimit in dest chain native token), but this can be a relative low amount for Polygon and Avalanche chain (for Polygon thats 20M gas limit and 200 Gwei gas = 4 Matic, for Avalanche the block gas limit seems to be 8M and the price ~30 nAVAX = 0.24 AVAX). Plus, the operator isnt going to receive that amount.
The following test demonstrates this scenario:
The test would fail with the following output:
Limit the gasLimit to the maximum realistic amount that can be used on the dest chain (including the gas used up to the point where its checked).
ACC01ADE (Holograph) confirmed and commented:
