Submission Details
Severity:
WITHDRAW_FEES_BLOCKAGE_BY_ETH_SENDING
Summary
Withdraw is blocked if user sent ether to the contract
Vulnerability Details
In withdrawFees function in require(address(this).balance == uint256(totalFees), "PuppyRaffle: There are currently players active!"); is checked that balance of the contract equals to the counter value. If someone sent eth to the contract, withdraw is blocked
Impact
Withdraw fees blockage
Tools Used
Recommendations
Do not compare contract balance with counter
Updates
Lead Judging Commences
Hamiltonite almost 2 years ago
Submission Judgement Published Assigned finding tags:
greifers-send-money-to-contract-to-block-withdrawfees
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.