Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: medium
Valid

Array Size Limitation

Summary

The contract uses an array called players to store the addresses of raffle participants. While arrays are a common choice for such a purpose, there's a risk that the array could become too large and cause DOS.

Vulnerability Details

The use of an array to store participant addresses can lead to DOS of the main functionality of the contract and can put the contract in an ambiguous state.

Impact

As the players array grows, it could potentially result in denial-of-service (DOS).

Tools Used

Manual review

Recommendations

Consider implementing a mechanism to limit the size of the players array, or use mapping

Updates

Lead Judging Commences

Hamiltonite Lead Judge almost 2 years ago
Submission Judgement Published
Validated
Assigned finding tags:

denial-of-service-in-enter-raffle

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.