Submission Details
Severity:
Reentrancy attack possible in refund() function
Summary
'refund()' function allows to send the ticket refund to the address of the player. In case of 'msg.sender' being a malicious contract, it can allow to send all the balance of puppyRaffle in the form of 'entranceFee' to the contract by repeated calls to the refund function
Vulnerability Details
Impact
Tools Used
Recommendations
Updates
Lead Judging Commences
Hamiltonite over 1 year ago
Submission Judgement Published Assigned finding tags:
reentrancy-in-refund
reentrancy in refund() function
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.