Submission Details
Severity:
The winner of Rap Battle is predictable.
Summary
The random calculation is not truely random and can be exploited by a user so that they always win.
Vulnerability Details
msg.sender, block.timestamp and block.prevrandao can be manipulated by the validator.
Impact
Validator can manipulate the Random Number Generation function to win the battle.
Tools Used
Manual Review
Recommendations
Use oracle to generate Random Number.
Rewards breakdown
nSLOC
201This contest has a flat reward structure with the following payouts:
100 EXP
20 EXP
2 EXP
Live
The contest is live. Earn rewards by submitting a finding.
Appeals
This is your time to appeal against judgements on your submissions.
Appeals Review
Appeals are being carefully reviewed by our judges.