First Flight #2: Puppy Raffle

Summary

Throughout the code, block.timestamp is being used as a oracle to fetch the various timestamps.

Vulnerability Details

Using block.timestamp makes the code susceptible to manipulation.
Miners could exploit this.
Also using this block.timestamp makes it vulnerable as a predictable randomness source.

Impact

Critical potential when elevated because of the fact that this method is used throughout the whole code base.
This makes every part of the code where this method is used potentially susceptible to a exploit

Tools Used

Vs Code

Recommendations

Use off-chain oracle providers like Chainlink to prevent on-chain manipulation by hackers.