Submission Details
Severity:
The contract can be blocked if the winner cannot receive ether.
Summary
The contract can be blocked if the winner cannot receive ether.
Vulnerability Details
In the fulfillRandomWords() function ether is sent to the winner by the send function. However, this function may be reverted if the receiver is a contract that has revert in the fallback() or receive() function. In that case VRF Coordinator will not perform a second rawFulfillRandomWords and contract functionality will be blocked.
Impact
High.
Tools Used
VSCode.
Recommendations
Consider change to "Withdrawal" pattern
Updates
Lead Judging Commences
inallhonesty over 1 year ago
Submission Judgement Published Assigned finding tags:
Winner can be a contract that refuses ETH and brinks the whole contract + reverts on Chainlink VRF
Rewards breakdown
nSLOC
136This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.