Submission Details
Severity:
PuppyRaffle::selectWinner, the winner address can cause DOS
Summary
In PuppyRaffle.selectWinner(), DOS attack.
Vulnerability Details
the winner address could be a smart contract that doesn't accept ether, or consume all gas and cause Denial of service.
Or the winner can be a contract that doesn't implement the ERC721Received standard.
Impact
severity : medium
likelihood : low
Tools Used
manual verification
Recommendations
no mitigation. But to keep trying the call/simulate the call locally before broadcasting to mainnet and check for if tx fails and try till some winner can pass.
Updates
Lead Judging Commences
Hamiltonite almost 2 years ago
Submission Judgement Published Assigned finding tags:
smart contract wallet without fallback/receive will halt the raffle
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.