Submission Details
Severity:
Reliance on block.timestamp in selectWinner could result in the raffle being manipulated
Summary
Reliance on block.timestamp could result in the raffle being manipulated
Vulnerability Details
The use of block.timestamp to determine when a winner can be selected is problematic in that block values can potentially be manipulated by a miner to their advantage.
Impact
Low
Tools Used
VS Code
Slither
Recommendations
Use an external source to obtain the current time
Updates
Lead Judging Commences
Hamiltonite almost 2 years ago
Submission Judgement Published Assigned finding tags:
weak-randomness
Root cause: bad RNG Impact: manipulate winner
Rewards breakdown
nSLOC
143This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.