First Flight #2: Puppy Raffle

Summary

withdrawFees allows anyone to call the function

Vulnerability Details

withdrawFees can be called by anyone, it should be onlyOwner so that only the owner can initiate fee withdrawal

Impact

anyone can call the withdrawFees function, however, it still goes to the fee address so the fees will still go to the right place

Tools Used

VSCode

Recommendations

consider making this onlyOwner so we don't have random people invoking this, maybe the owner wants to have control over when he takes the fees.