First Flight #17: Dussehra

Summary

The Dussehra::killRavana function is susceptible to overflow if the length of participants and the entrance fee are too large.

Vulnerability Details

In killRavana function, the multiplication of WantToBeLikeRam.length, entranceFee, and 50 can potentially overflow.

If WantToBeLikeRam.length and entranceFee are both very large, their product multiplied by 50 may exceed the maximum value of uint256, causing an overflow.

Impact

Possible overflow can cause the killRavana function to revert, resulting in funds being stuck in the contract forever.

Tools Used

Manual review

Recommendations

Implement limits on the number of entries for the event to prevent excessively large values for WantToBeLikeRam.length.