Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: high
Valid

block.timestamp can be manipulated and it's possible to get desirable winnerIndex

Summary

There is a potential vulnerability in the system where block.timestamp can be manipulated, allowing for the manipulation of the winnerIndex to achieve a desired outcome. It is essential to address this issue to prevent manipulation and ensure the fairness and integrity of the winner selection process.

Recommendations

use chanlink VRF

Updates

Lead Judging Commences

Hamiltonite Lead Judge almost 2 years ago
Submission Judgement Published
Validated
Assigned finding tags:

weak-randomness

Root cause: bad RNG Impact: manipulate winner

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.