First Flight #2: Puppy Raffle

Summary

Critical functionality and updates missing events

Vulnerability Details

Critical functions like selecting a winner(selectWinner) and withdrawing fees(withdrawFees) do not emit events

Impact

Events are critical for front ends, off chain tooling, monitoring and reporting and even security. For example if something is picked up in real time from events that is suspicious action can be taken to mitigate. However if there is no events then missed easy way to monitor, get alert real time activities of project disadvantaging security

Tools Used

Manual Analysis

Recommendations

Add events e.g