Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: high
Valid

Ramdomness based on `blocktime.stamp`

Summary

In the RapBattle contract two users battle each other and the winner is decided by the help of blocktime.stamp.

Vulnerability Details

The outcome of the randomness depend on block.timestamp , block.prevrandao and msg.sender address. All of them can either be known or can be altered.

Impact

The result of the battle depends on this randomness and if it's altered the result will be altered as well.

Tools Used

manual review

Recommendations

It's recommended to use an off-chain random number generator.

Updates

Lead Judging Commences

inallhonesty Lead Judge over 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

Weak Randomness

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.