Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: low
Invalid

Reentrancy attack in `Dussehra::withdraw` function.

Summary

Reentrancy attack in Dussehra::withdraw function.

Vulnerability Details

The function Dussehra::withdraw does not follow CEI (checks, effects, interactions).

Impact

The function Dussehra::withdraw does not follow CEI (checks, effects, interactions).

Tools Used

Static analysis

Recommendations

Follow CEI

Updates

Lead Judging Commences

bube Lead Judge about 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity
Assigned finding tags:

Invalid - reentrancy in withdraw

The `withdraw` function sends the given amount to Ram. If the attacker calls the `withdraw` function again before the state variable is changed, the function will revert because there are no more funds in the contract. This reentrancy has no impact for the protocol. It is recommended to follow the CEI pattern, but this is informational.

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.