Submission Details
Severity:
selectWinner should set the state
Summary
selectWinner should update raffle state
Vulnerability Details
when drawing the raffle, it should set to "drawing" state to prevent players from entering while the draw is being determined. Because the generation of random numbers using Chainlink VRF can take some time, we need to prevent new players from entering while this is being done.
Impact
new players entering while the draw is still being done will result in players losing their entry fee
Tools Used
VSCode
Recommendations
use a raffle state and set to drawing while winner is being selected
Updates
Lead Judging Commences
Hamiltonite about 2 years ago
Submission Judgement Published Reason: User experience and design improvement
Assigned finding tags:
weak-randomness
Root cause: bad RNG Impact: manipulate winner
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.