highLogic errorEVM-Solidity
Winnables Raffles: Method refundPlayers doesn't update _lockedETH in WinnableTicketManager
- Payout
- $0
- Protocol
- Winnables Raffles
- Disclosed
- Aug 20, 2024
- Source
- sherlock
WinnablesTicketManager tracks all ticket-sale ETH (or AVAX) in a `_lockedETH` counter that the owner cannot withdraw until a raffle resolves. When a raffle is cancelled, `refundPlayers()` returns buyers' ticket payments but fails to decrement `_lockedETH`. As …
Similar reports
- No close matches yet.
References
This report is already public and closed. CoinBuggie never publishes active or unpatched vulnerability data.