First Flight #2: Puppy Raffle

Summary

feeAddress could be set as address(0) and can result in loss of fees.

Vulnerability Details

Using the function changeFeeAddress(...), the owner can change the address unknowingly to the zero address. Then if someone calls the function withdrawFees(...) after the winner is selected, then the fees will go to the zero address.

Impact

• Loss of fees.

Tools Used

Manual Review

Recommendations

Make sure to check the address for zero address while setting up the feeAddress in constructor, as well as in the function changeFeeAddress(...).