If i have a very expensive runtime api, that can be called via an rpc, is this a vector for a dos attack?

I understand that this is an offchain query to storage and therefore should not interfere with the runtime at all but what is the worst case if such a runtime api exists?

Please correct me if im misunderstood.


1 Answer 1


The worst case with such an api is that the RPC node could be brought down. However, the API could also be called via light clients, so you should try to not have some runtime API that iterates the entire storage or other expensive operations.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.