First Flight #2


First Flight #2: Puppy Raffle

This next First Flight audit will have you applying your skills to an NFT Raffle Protocol. Let's make those Pups secure!

Start Date Oct 25th, 2023 (12:00)
End Date Nov 1st, 2023 (12:00)
Time Left 0d/0h/0m


Contest Details

Prize Pool

  • High - 100xp

  • Medium - 20xp

  • Low - 2xp

  • Starts: Noon UTC Wednesday, Oct 25 2023

  • Ends: Noon UTC Wednesday, Nov 01 2023


  • nSLOC: 143
  • Complexity Score: 111

Puppy Raffle

This project is to enter a raffle to win a cute dog NFT. The protocol should do the following:

  1. Call the enterRaffle function with the following parameters:
    1. address[] participants: A list of addresses that enter. You can use this to enter yourself multiple times, or yourself and a group of your friends.
  2. Duplicate addresses are not allowed
  3. Users are allowed to get a refund of their ticket & value if they call the refund function
  4. Every X seconds, the raffle will be able to draw a winner and be minted a random puppy
  5. The owner of the protocol will set a feeAddress to take a cut of the value, and the rest of the funds will be sent to the winner of the puppy.

Getting Started


  • git
    • You'll know you did it right if you can run git --version and you see a response like git version x.x.x
  • foundry
    • You'll know you did it right if you can run forge --version and you see a response like forge 0.2.0 (816e00b 2023-03-16T00:05:26.396218Z)


git clone
cd 2023-10-Puppy-Raffle

Optional Gitpod

If you can't or don't want to run and install locally, you can work with this repo in Gitpod. If you do this, you can skip the clone this repo part.

Open in Gitpod



forge test

Test Coverage

forge coverage

and for coverage based testing:

forge coverage --report debug

Audit Scope Details

  • Commit Hash: 22bbbb2c47f3f2b78c1b134590baf41383fd354f
  • In Scope:
└── PuppyRaffle.sol


  • Solc Version: 0.7.6
  • Chain(s) to deploy contract to: Ethereum


Owner - Deployer of the protocol, has the power to change the wallet address to which fees are sent through the changeFeeAddress function. Player - Participant of the raffle, has the power to enter the raffle with the enterRaffle function and refund value through refund function.

Known Issues