Invalid addresses can enter the lottery, if they end up winning no ERC721 can be minted and the funds will be locked in the contract.
There is no check for Address(0) in the PuppuRaffle::enterRaffle
function. Therefor invalid addressen can participate. If they end up winning the lottery; PuppyRaffle::selectWinnner()
will revert and the winnings will be locked inside the contract.
Loss of funds.
Foundry
Funds are locked to no one. If someone gets the refund issue, they also got this issue. IMPACT: High Likelihood: High
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.