Submission Details
Severity:
SELECTIVE_PACKING_RANDOM_VULNERABILITY
Summary
Random is vulnerable for the selective packing by miner
Vulnerability Details
Random use block.difficulty as a random source. When miner mines block and knows who would be the winner, he can drop the block if the winner is not the desired. Miner can mine blocks until he generate the block with the correct winner and broadcast it
Impact
Winner can be chose by miner in POW network
Tools Used
Recommendations
Use random oracle
Updates
Lead Judging Commences
patrickalphac almost 2 years ago
Submission Judgement Published Assigned finding tags:
weak-randomness
Root cause: bad RNG Impact: manipulate winner
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.