Submission Details
Severity:
incorrect totalAmountCollected reverts and lock funds
Summary
When a user requests a refund, the players.length value is not appropriately updated, resulting in an incorrect calculation of players.length * entranceFee. This issue leads to an inaccurate value and must be resolved to maintain the integrity of fee calculations.
Vulnerability Details
The incorrect calculation of totalAmountCollected results in transaction reversals and the locking of funds
Updates
Lead Judging Commences
Hamiltonite almost 2 years ago
Submission Judgement Published Assigned finding tags:
refund-doesnt-reduce-players-array-size-causing-protocol-to-freeze
zero address can win the raffle
Funds are locked to no one. If someone gets the refund issue, they also got this issue. IMPACT: High Likelihood: High
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.