First Flight #2: Puppy Raffle

Summary

entranceFee should have an onlyOwner function that set it.

Vulnerability Details

Since it is not modifiable after the contract is deployed, there is no other way to change it. If needed, protocol owners would have to re-deploy a new contract with the new fee and migrate everyone. This is not flexible and would incur additional time, money and efforts.

Impact

If the protocol wants to change the fee, they would be obliged to deploy a new contract (incurring additional gas fees) and migrate everyone to the new version.

Tools Used

Manual Review.

Recommendations

It is recommended to add a setter function to save on gas if there is a need to replace the contract.