Submission Details
Severity:
Dangerous ETH call - withdrawFees function
Summary
The PuppyRaffle contract contains a potentially dangerous call in the withdrawFees function, which could result in an unprotected transfer of Ether to an arbitrary address.
Impact
The vulnerability allows anyone to call the withdrawFees function and send Ether to any arbitrary address. This could lead to unauthorized Ether transfers
Tools Used
Slither
Recommendations
Implement Access Control to restrict the access of the withdrawFees function
Updates
Lead Judging Commences
Hamiltonite almost 2 years ago
Submission Judgement Published Reason: User experience and design improvement
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.