Submission Details
Severity:
Users can enter the raffle after the end of the ruffle duration.
Summary
Users can enter the raffle after the end of the ruffle duration.
Vulnerability Details
The contract defines RAFFLE_DURATION as 86400 seconds or one day. However, the enter_raffle function has no restriction regarding when users can enter the raffle, and users can still participate in the raffle after the RAFFLE_DURATION is finished.
Impact
Medium
Tools Used
Manual analysis
Recommendations
Add require statement to limit the time users can participate in a raffle to the enter_raffle function.
Rewards breakdown
nSLOC
136This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.