MorpheusAI

MorpheusAI
Foundry
22,500 USDC
View results
Submission Details
Severity: medium
Invalid

Use of block.timestamp allows validators to hold transactions and it doesn't serve as an adequate protection against slippage

Summary

Use of block.timestamp allows validators to hold transactions and it doesn't serve as an adequate protection against slippage.

Vulnerability Details

Using block.timestamp means a transaction will only go through when included in the mined blocks by validators. This can result to a loss.

Crypto is volatile. The time frame a transaction should go through shouldn't be pegged to block.timestamp. As it is, the contract is at the mercy of validators.

Impact

There could be delay in adding the transaction to the block. And this can result to getting fewer tokens out.

Tools Used

Manual review

Recommendations

Use a specific time and not block.timestamp

Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

Protocol should not use block.timestamp as deadline in Uniswap interactions because it renders the protection mechanism useless

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Invalidated
Reason: Non-acceptable severity

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.