Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: high
Valid

Array size not reduced

Summary

Array size not reduced after deleting the player.

Vulnerability Details

In function refund
players[playerIndex] = address(0);
after deleting the player the array size is not reduced

Impact

There will be error is calculating the array size or number of players.

Tools Used

Foundry
Git
Manual review

Recommendations

Reduce the size of the array after deleting the player.

Updates

Lead Judging Commences

Hamiltonite Lead Judge almost 2 years ago
Submission Judgement Published
Validated
Assigned finding tags:

refund-doesnt-reduce-players-array-size-causing-protocol-to-freeze

zero address can win the raffle

Funds are locked to no one. If someone gets the refund issue, they also got this issue. IMPACT: High Likelihood: High

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.