Mostafa (SRLabs)

[Staking] Limiting the number of nominators per operator can lead to a DoS against nominator candidates

7

# Summary In pallet-domains, there is a limit on the number of nominators that can nominate a operator candidate. Setting a limit on `MaxNominators` potentially enables a well-funded malicious attacker...

IdentityFee implementation used for fee calculation in messenger and transaction-payment pallets

2

Risk: Moderate severity ## Issue In pallets messenger and transaction-payment, the fee calculation for messages or transactions is delegated to the `WeightToFee` implementation which can be configured via runtime's configuration....

[High] XDM - Malicious domain owner can exploit channel's fee model

10

# Issue Description In the current fee model, the caller [sets the fee](https://github.com/subspace/subspace/blob/cdeaeb3729e65e1b549b248ee315b70924fcbff3/domains/pallets/messenger/src/lib.rs#L980) for opening a channel through the [channel initialization parameters](https://github.com/subspace/subspace/blob/cdeaeb3729e65e1b549b248ee315b70924fcbff3/domains/pallets/messenger/src/lib.rs#L560). This flexibility allows the caller to set the...

[Low] XDM - Delay in XDM message execution allows opportunistic attacks on src/dst chain

3

# Issue Description An XDM message is not executed on the destination chain (dst_chain) until the domain block of the source chain (src_chain_id) containing the originating extrinsic is out of...