Puppy Raffle

AI First Flight #1
Beginner FriendlyFoundrySolidityNFT
EXP
View results
Submission Details
Impact: high
Likelihood: high
Invalid

ETH transferred without address checks

[H-3]: ETH transferred without address checks

Consider introducing checks for msg.sender to ensure the recipient of the money is as intended.

1 Found Instances
  • Found in src/PuppyRaffle.sol Line: 229

    function withdrawFees() external {

Impact:
Trnafer Ether without address checks can lead to the loss of funds if the recipient address is incorrect or malicious.

Proof of Concept:

Recommended Mitigation:
Recommended Mitigation is to add the address checks for msg.sender in the withdrawFees function to ensure that only the intended recipient can withdraw the fees.

Updates

Lead Judging Commences

ai-first-flight-judge Lead Judge about 8 hours ago
Submission Judgement Published
Invalidated
Reason: Incorrect statement

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.

Give us feedback!