Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: high
Invalid

Raffle state not tracked

Summary

The raffle has no state

Vulnerability Details

players can enter the raffle at any time, including when the raffle winner is being selected. this would result in new players being deleted from the player array and not being able to get a refund.
there should be a raffle state to track if the raffle is open or if it is drawing,
it should not allow players to enter the raffle while the winner is being selected.

Impact

players losing their entry fee and having no chance to win, unfair raffle

Tools Used

VSCode

Recommendations

implement a raffle state enum and only allow players to enter if the raffle is open, and change state to Drawing while it is being drawn.

Updates

Lead Judging Commences

Hamiltonite Lead Judge about 2 years ago
Submission Judgement Published
Invalidated
Reason: User experience and design improvement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!