Submission Details
Severity:
`snek_raffle.vy::enter_raffle` not a complete `ENTRANCE_FEE` check condition
Summary
snek_raffle.vy::enter_raffle not a complete ENTRANCE_FEE check condition
Vulnerability Details
According to ERROR_SEND_MORE_TO_ENTER_RAFFLE description
ERROR_SEND_MORE_TO_ENTER_RAFFLE: constant(String[100]) = "SnekRaffle: Send more to enter raffle" but we check a strict condition assert msg.value == ENTRANCE_FEE, ERROR_SEND_MORE_TO_ENTER_RAFFLE
Impact
Someone may send a little bit more money and get SnekRaffle: Send more to enter raffle message
Tools Used
Manual check
Recommendations
Change condition
- assert msg.value == ENTRANCE_FEE, ERROR_SEND_MORE_TO_ENTER_RAFFLE
+ assert msg.value >= ENTRANCE_FEE, ERROR_SEND_MORE_TO_ENTER_RAFFLE
Rewards breakdown
nSLOC
136This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.