Submission Details
Severity:
Missing randomness due to the use of `block.timestamp`
Summary
Hashing block.timestamp, block.prevrandao, msg.sender will give a predictable number which is not a good random number. Malicious users can manipulate these numbers to win the battle.
Vulnerability Details
Impact
Loss of fund and bad user experience.
Tools Used
manual review and Foundry.
Recommendations
Updates
Rewards breakdown
nSLOC
201This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.