Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: medium
Valid

Contract balance issue

Summary

The contract balance can vary.

Vulnerability Details

In withdrawFees function at line 158
require(address(this).balance == uint256(totalFees), "PuppyRaffle: There are currently players active!");
if the owner didn't withdrawn the fees from previous pool then that will be also present in the contract balance.

Impact

We will not be able to call the withdrawfees function.

Tools Used

Recommendations

The fees can be sent to the owner at the time when the prize pool is sent to the winner.

Updates

Lead Judging Commences

Hamiltonite Lead Judge over 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

greifers-send-money-to-contract-to-block-withdrawfees

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.