https://sherlock-files.ams3.digitaloceanspaces.com/profile_images/defaults/default_avatar_7.png

Paradox

Security Researcher

Contact Me

High

3

Total

Medium

2

Total

$39.00

Total Earnings

#1995 All Time

1x

Payouts

regular

1x

Top 25

regular

1x

Top 50

All

Sherlock

Aug '24

Winnables Raffles

Winnables Raffles

39.80 USDC • 5 total findings • Sherlock • Paradox

#18

high

lockedETH is not reduced in refundPlayers function

high

An attacker can propagate the winner to a wrong chain to lock the prize.

high

Anybody can cancel raffles if it is in PRIZE_LOCKED state

medium

setRole function adds role on every call to user irrespective of passed status.

medium

Admin can steal the prize even after a winner won that prize