Gas Griefing

An attack pattern where a malicious actor causes a target contract to do expensive work that doesn't benefit the attacker but burns the target's gas allowance, ETH balance, or block-gas budget. Common forms: stuffing a contract's user-controlled array until iteration exceeds the block gas limit (denial of service), or sending tokens with malicious fallback that consumes the relayer's gas. Defences include capping array sizes, charging gas costs back to the caller, and using pull-payment patterns over push-payment patterns.