First Flight #2: Puppy Raffle

Summary

Detects reentrancies that allow manipulation of the order or value of events.

Vulnerability Details

Location:

Reentrancy in PuppyRaffle.refund(uint256) (src/PuppyRaffle.sol#96-105):
External calls:

• address(msg.sender).sendValue(entranceFee) (src/PuppyRaffle.sol#101)
  Event emitted after the call(s):

• RaffleRefunded(playerAddress) (src/PuppyRaffle.sol#104)

Impact

Attackers can manipulate the code

Tools Used

Audit Wizard (Slither)

Recommendations

Apply the check-effects-interactions pattern.