Beginner FriendlyFoundryNFT
100 EXP
View results
Submission Details
Severity: low
Valid

### [L-1] Misconfiguration of `block.timestamp` in `Dussehra::killRavana`

[L-1] Misconfiguration of block.timestamp in Dussehra::killRavana function allows someone to call the function 2 minutes before October 12th and 1 minute after October 13th.

Description: According to the sponsor "killRavana - Allows users to kill Ravana and Organiser will get half of the total amount collected in the event. this function will only work after 12th October 2024 and before 13th October 2024." The values of block.timestamp were set up correctly inside the ChoosingRam contract, but are slightly off in the Dussehra contract.

Impact: A user can call the killRavana function ~2 minutes earlier than expected and ~1 minute later than the expected end date.

Recommended mitigation: Adjust block.timestamp to match the values in the ChoosingRam contract. 1728691200 for start time and 1728777600 end time.

Updates

Lead Judging Commences

bube Lead Judge about 1 year ago
Submission Judgement Published
Validated
Assigned finding tags:

Incorrect timestamp

Support

FAQs

Can't find an answer? Chat with us on Discord, Twitter or Linkedin.