Submission Details
Severity:
L-5: Refund function should check if the playedIndex is within the array
Summary
LOW-5: The refund function takes "uint256 playerIndex" as a parameter. The index can however be larger than the current length of the players array.
Vulnerability Details
Accessing an index out of the range of the array length may result in the failure of the transaction.
Impact
User experience
Tools Used
Static analysis, local testing
Recommendations
Add a "require" statement checking that the playerIndex value is smaller than the length of the array.
"require(playerIndex < players.length, "PuppyRaffle: The index is out of scope of the array");"
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.