Summary

The typical rule of black jack states that at the player's turn he/she can only draw one card at a time but here the function drawCard can be called multiple times without waiting for dealer's turn to choose their strategy

Vulnerability Details

A malicious user can call the TwentyOne::drawCarduser multiple times.

Impact

=>Breakage of basic rule of Black Jack and also can increase gas cost becuase of increase in Interations from the `playersHand` value

Tools Used

Recommendations

Adding checks to the function, weather if its dealer's turn or player's turn, Preventing multiple calls to the game.