First Flight #9: Soulmate

Summary

Using block.timestamp for PRNG can be manipulated by miners, leading to predictable outcomes. The reliance on values that miners can influence introduces centralization risks, as miners with more computational power can exert more control over the outcome.

Vulnerability Details

Using block.timestamp for PRNGs in smart contracts can be manipulated by miners, leading to predictable outcomes and security risks, use secure sources like Chainlink VRF.

Impact

Users might notice irregularities or unfairness.

Tools Used

Manual Review

Recommendations

To mitigate this vulnerability, developers should avoid using block.timestamp directly for PRNGs. Instead, consider using sources of randomness that are less susceptible to miner influence, such as Chainlink VRF.