Missing address(0) check in 'enterRaffle'
Function 'enterRaffle' does not check the input for address(0).
Having address(0) on some position within 'players' array means that on that there was a valid address there but it was refunded according to the contract's logic.
Missing the address(0) check in enterRaffle means someone could send funds to the contract (paying entranceFee) and at the same time not register valid address for a player.
This will have consequences for the mathematic calculations in the other functions.
Manual review
Implement address(0) check in enterRaffle
The contest is live. Earn rewards by submitting a finding.
This is your time to appeal against judgements on your submissions.
Appeals are being carefully reviewed by our judges.